Home › Microsoft Patch Tuesday › July 2025

Microsoft Patch Tuesday, July 2025

·

Microsoft's July 2025 security release, published July 8, 2025: 43 updates fixing 125 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 3 CVEs from this release are on the Senserva hot list today (as of 2026-10-30), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.
43
Updates (KBs)
125
CVEs fixed
3
On the CISA KEV list
3
Ransomware-linked
17
Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-53770Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 9.8ExploitedRansomware Hot now
CVE-2025-49704Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 8.8ExploitedRansomware Hot now
CVE-2025-49706Microsoft SharePoint Server Spoofing VulnerabilityCVSS 6.5ExploitedRansomware Hot now

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-47981SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerabilit...CVSS 9.8
CVE-2025-49701Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-49757Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-47986Universal Print Management Service Elevation of Privilege VulnerabilityCVSS 8.8
CVE-2025-48824Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-49657Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-49672Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-49674Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-49676Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-49687Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityCVSS 8.8
CVE-2025-49688Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-49723Windows StateRepository API Server file Tampering VulnerabilityCVSS 8.8

Products fixed this month

Microsoft Word 2016 (32-bit edition) (5)Microsoft Word 2016 (64-bit edition) (5)Microsoft SharePoint Enterprise Server 2016 (4)Microsoft SharePoint Server 2019 (4)Microsoft SharePoint Server Subscription Edition (2)Windows Server 2008 R2 for x64-based Systems Service Pack 1 (2)Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (2)Windows Server 2008 for 32-bit Systems Service Pack 2 (2)Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) (2)Windows Server 2008 for x64-based Systems Service Pack 2 (2)

Every update in this release

All 43 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

UpdateSeverityMax CVSSCVEs fixedProductsAlso
KB5002760 Exploited RansomwareCritical9.82Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002759 Exploited RansomwareCritical9.82Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002754 Exploited RansomwareCritical9.82Microsoft SharePoint Server 2019Support · Catalog
KB5002753 Exploited RansomwareCritical9.82Microsoft SharePoint Server 2019Support · Catalog
KB5002768 Exploited RansomwareCritical9.82Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002744 Exploited RansomwareHigh8.84Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002741 Exploited RansomwareHigh8.84Microsoft SharePoint Server 2019Support · Catalog
KB5002751 Exploited RansomwareHigh8.82Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5062557Critical9.894Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, and 1 moreSupport · Catalog
KB5062572Critical9.896Windows Server 2022, Windows Server 2022 (Server Core installation)Support · Catalog
KB5062554Critical9.875Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, and 3 moreSupport · Catalog
KB5062552Critical9.879Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for x64-based Systems, and 1 moreSupport · Catalog
KB5062553Critical9.8102Windows Server 2025 (Server Core installation), Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, and 1 moreSupport · Catalog
KB5062570Critical9.898Windows Server 2022, 23H2 Edition (Server Core installation)Support · Catalog
KB5062561Critical9.857Windows 10 for 32-bit Systems, Windows 10 for x64-based SystemsSupport · Catalog
KB5062560Critical9.888Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, and 1 moreSupport · Catalog
KB5062632Critical9.855Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Support · Catalog
KB5062619Critical9.855Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Support · Catalog
KB5062592Critical9.859Windows Server 2012, Windows Server 2012 (Server Core installation)Support · Catalog
KB5062597Critical9.863Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)Support · Catalog
KB5062624High8.851Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2, and 1 moreSupport · Catalog
KB5062618High8.851Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2, and 1 moreSupport · Catalog
KB5063035High8.81Microsoft Visual Studio 2015 Update 3Support · Catalog
KB5058713High8.53Microsoft SQL Server 2019 for x64-based Systems (GDR)Support · Catalog
KB5058712High8.53Microsoft SQL Server 2022 for x64-based Systems (GDR)Support · Catalog
KB5058722High8.53Microsoft SQL Server 2019 for x64-based Systems (CU 32)Support · Catalog
KB5058721High8.53Microsoft SQL Server 2022 for x64-based Systems (CU 19)Support · Catalog
KB5002742High8.47Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition), and 1 moreSupport · Catalog
KB5002740High8.43Office Online ServerSupport · Catalog
KB5002749High8.43Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), and 1 moreSupport · Catalog
KB31909343High8.01Microsoft Configuration Manager 2503Support · Catalog
KB5002743High7.81Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002739High7.81Microsoft SharePoint Server 2019Support · Catalog
KB5002745High7.81Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)Support · Catalog
KB5002746High7.82Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)Support · Catalog
KB5002655High7.81Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)Support · Catalog
KB5058716High7.51Microsoft SQL Server 2017 for x64-based Systems (GDR)Support · Catalog
KB5058717High7.51Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature PackSupport · Catalog
KB5058714High7.51Microsoft SQL Server 2017 for x64-based Systems (CU 31)Support · Catalog
KB5001941High7.01Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)Support · Catalog
KB4464583High7.01Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)Support · Catalog
KB5002747High7.01Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)Support · Catalog
KB5002734Medium5.51Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)Support · Catalog
Take this release to your AI

Composed from the July 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

See every Patch Tuesday, all months  |  The live Microsoft patch tracker

← June 2025August 2025 →

Now see your own patch state.

Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and turns this release into your list: every update still missing, on every device, ranked by what attackers are actually exploiting. The 650+ configuration checks come with it.

1Find it2Fix it3Prove it
Start my free patch auditAll you do is register.
Reference: Microsoft CVE and vulnerability management, ranked by real-world risk, and the Microsoft patching guide.
Data notice: this page is provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative Microsoft advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.