Microsoft June 2025 Security Updates

[Corrine]

The Microsoft June 2025 security updates have been released and consist of 55 new CVEs to Microsoft products. With the additional third-party CVEs being documented, it brings the combined total to 70 CVEs.

Of the Microsoft CVEs released, 10 are rated critical and the rest are rated important in security. At the time of release, one is listed as being publicly known and one under active attack.

The security updates apply to the following products, features and roles: Windows and Windows Components, Office and Office Components, .NET and Visual Studio, Nuance Digital Engagement Platform, and the Windows Cryptographic Service.

See the list of KBs at the bottom of the page at June 2025 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates.

Recommended Reading:   See Dustin Childs review and analysis in Zero Day Initiative -- The June 2025 Security Update Review.

[winchester73]

Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.

https://arstechnica.com/security/2025/06/unearthed-in-the-wild-2-secure-boot-exploits-microsoft-patches-only-1-of-them/