What was in the July 2025 Microsoft Patch Tuesday?

Microsoft released 37 updates fixing 64 CVEs in July 2025, of which 5 were actively exploited (CISA KEV) and 3 were ransomware-linked.

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › July 2025

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, July 2025

Released July 8, 2025 · data last refreshed 2026-07-09

Microsoft's July 2025 security release, published July 8, 2025: 37 updates fixing 64 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 3 CVEs from this release are on the Senserva hot list today (as of 2026-07-13), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.

Updates (KBs)

CVEs fixed

Actively exploited

Ransomware-linked

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-53770Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 9.8ExploitedRansomware Hot now

CVE-2025-49704Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 8.8ExploitedRansomware Hot now

CVE-2025-33053Internet Shortcut Files Remote Code Execution VulnerabilityCVSS 8.8Exploited

CVE-2025-33073Windows SMB Client Elevation of Privilege VulnerabilityCVSS 8.8Exploited

CVE-2025-49706Microsoft SharePoint Server Spoofing VulnerabilityCVSS 6.5ExploitedRansomware Hot now

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-49701Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-33064Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-33066Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-49000SQL Server Native Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-49739Visual Studio Elevation of Privilege VulnerabilityCVSS 8.8

Products fixed this month

Microsoft Office 2019 for 32-bit editions (12)Microsoft SharePoint Enterprise Server 2016 (11)Microsoft SharePoint Server 2019 (11)Microsoft Office 2019 for 64-bit editions (9)Microsoft SharePoint Server Subscription Edition (8)Microsoft SQL Server 2019 for x64-based Systems (GDR) (8)Windows Server 2019 (7)Windows Server 2019 (Server Core installation) (7)Windows Server 2022 (7)Microsoft 365 Apps for Enterprise for 32-bit Systems (6)

Take this release to your AI

Composed from the July 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the July 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-07, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 37 updates (KBs) fixing 64 CVEs, 5 actively exploited (CISA KEV), 3 ransomware-linked, 5 Critical updates.
Actively exploited CVEs: CVE-2025-53770 (CVSS 9.8), CVE-2025-49704 (CVSS 8.8), CVE-2025-33053 (CVSS 8.8), CVE-2025-33073 (CVSS 8.8), CVE-2025-49706 (CVSS 6.5).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← June 2025 August 2025 →