Microsoft Patch Tuesday July 2025: 130 Vulnerabilities Patched, Including 1 Zero-Day and 41 RCE Flaws

Microsoft released its July 2025 Patch Tuesday security updates on July 8, 2025, addressing 130 vulnerabilities across its software ecosystem, including one publicly disclosed zero-day vulnerability and numerous critical security flaws that pose significant risks to organizations worldwide.

The July 2025 security update represents a substantial patch cycle, with 14 vulnerabilities rated as “Critical” – ten of which are remote code execution (RCE) vulnerabilities, one information disclosure flaw, and two AMD side channel attack vulnerabilities. The comprehensive patch distribution includes:

Vulnerability Type	Count
Remote Code Execution (RCE)	41
Elevation of Privilege (EoP)	53
Information Disclosure (ID)	18
Denial of Service (DoS)	5
Spoofing	4
Data Tampering	1
Security Feature Bypass	8
Total	130

These counts exclude four Mariner and three Microsoft Edge issues that were addressed separately earlier in the month.

Zero-Day Vulnerability in SQL Server

The most significant threat patched this month is CVE-2025-49719, a publicly disclosed zero-day vulnerability in Microsoft SQL Server that allows unauthorized information disclosure.

This flaw enables remote, unauthenticated attackers to access data from uninitialized memory through improper input validation in SQL Server.

Microsoft attributes the discovery to Vladimir Aleksic, but has not disclosed how the vulnerability became publicly known.

Organizations can remediate this issue by installing the latest version of Microsoft SQL Server along with Microsoft OLE DB Driver 18 or 19.

Critical Office and SharePoint Vulnerabilities

Microsoft Office users face significant risks from multiple critical RCE vulnerabilities that can be exploited simply by opening malicious documents or viewing them through the preview pane.

The company has warned that security updates for these flaws are not yet available for Microsoft Office LTSC for Mac 2021 and 2024 editions, but will be released shortly.

SharePoint environments are also at risk, with CVE-2025-49704 representing a critical RCE vulnerability that can be exploited remotely over the Internet by authenticated users. This flaw poses particular concern for organizations with SharePoint deployments accessible to external users.

Windows Infrastructure Under Threat

The July updates address severe vulnerabilities across Windows core components, including the Windows KDC Proxy Service (KPSSVC) with CVE-2025-49735, rated as Critical for remote code execution1. Windows Hyper-V environments face risks from CVE-2025-48822, a critical RCE vulnerability in the Discrete Device Assignment (DDA) feature.

Additionally, the Windows Imaging Component is affected by CVE-2025-47980, a Critical information disclosure vulnerability, and SPNEGO Extended Negotiation faces a Critical RCE flaw tracked as CVE-2025-47981.

AMD Side Channel Vulnerabilities

Two Critical AMD vulnerabilities were also patched this month: CVE-2025-36357 affecting the L1 Data Queue and CVE-2025-36350 impacting the Store Queue, both involving Transient Scheduler Attacks. These side channel vulnerabilities could potentially allow attackers to extract sensitive information from AMD processors.

The July 2025 Patch Tuesday coincides with security updates from multiple vendors. Google patched an actively exploited zero-day (CVE-2025-6554) in Chrome, while other companies, including Cisco, Fortinet, Ivanti, and SAP, released their own security updates. This coordinated approach demonstrates the ongoing cybersecurity challenges facing the technology industry.

Microsoft’s updates also include improvements to Windows 11, with new features like smaller taskbar icons and enhanced Click to Do functionality for Copilot+ PCs. However, these feature rollouts will be gradual and may not be immediately available to all users.

Microsoft Patch Tuesday, July 2025 Vulnerability list

CVE ID	Description	Severity	Impact	Exploitation Status
CVE-2025-36357	AMD: CVE-2025-36357 Transient Scheduler Attack in L1 Data Queue	Critical	Information Disclosure	No
CVE-2025-36350	AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue	Critical	Information Disclosure	No
CVE-2025-49717	Microsoft SQL Server Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49735	Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-47980	Windows Imaging Component Information Disclosure Vulnerability	Critical	Information Disclosure	No
CVE-2025-47981	SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-48822	Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49695	Microsoft Office Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49696	Microsoft Office Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49697	Microsoft Office Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49698	Microsoft Word Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49702	Microsoft Office Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49703	Microsoft Word Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-49704	Microsoft SharePoint Remote Code Execution Vulnerability	Critical	Remote Code Execution	No
CVE-2025-26636	Windows Kernel Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-33054	Remote Desktop Spoofing Vulnerability	Important	Spoofing	No
CVE-2025-47159	Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-21195	Azure Service Fabric Runtime Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47971	Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47972	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47976	Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47984	Windows GDI Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-47985	Windows Event Tracing Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47986	Universal Print Management Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47987	Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48824	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49657	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49658	Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49661	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49670	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49671	Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49672	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49674	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49676	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49677	Microsoft Brokering File System Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49686	Windows TCP/IP Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49687	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49688	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49689	Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49690	Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49691	Windows Miracast Wireless Display Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49694	Microsoft Brokering File System Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47991	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47993	Microsoft PC Manager Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47994	Microsoft Office Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48812	Microsoft Excel Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49711	Microsoft Excel Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49716	Windows Netlogon Denial of Service Vulnerability	Important	Denial of Service	No
CVE-2025-49719	Microsoft SQL Server Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49721	Windows Fast FAT File System Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49723	Windows StateRepository API Server file Tampering Vulnerability	Important	Tampering	No
CVE-2025-49726	Windows Notification Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49731	Microsoft Teams Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47178	Microsoft Configuration Manager Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49753	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49756	Office Developer Platform Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-47973	Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47975	Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-1980-0000	Windows Kerberos Denial of Service Vulnerability	Important	Denial of Service	No
CVE-2025-47982	Windows Storage VSP Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47996	Windows MBT Transport Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47998	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-48000	Windows Connected Devices Platform Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48001	BitLocker Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-48002	Windows Hyper-V Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-48003	BitLocker Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-48799	Windows Update Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48800	BitLocker Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-48802	Windows SMB Server Spoofing Vulnerability	Important	Spoofing	No
CVE-2025-48803	Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48804	BitLocker Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-48805	Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-48806	Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-48808	Windows Kernel Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-48809	Windows Secure Kernel Mode Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-48810	Windows Secure Kernel Mode Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-48811	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48814	Remote Desktop Licensing Service Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-48815	Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48816	HID Class Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48817	Remote Desktop Client Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-48818	BitLocker Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-48819	Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48820	Windows AppX Deployment Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48821	Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-48823	Windows Cryptographic Services Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49659	Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49660	Windows Event Tracing Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49663	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49664	Windows User-Mode Driver Framework Host Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49665	Workspace Broker Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49666	Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49667	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49668	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49669	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49673	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49675	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49678	NTFS Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49679	Windows Shell Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49680	Windows Performance Recorder (WPR) Denial of Service Vulnerability	Important	Denial of Service	No
CVE-2025-49681	Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49682	Windows Media Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49683	Microsoft Virtual Hard Disk Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49684	Windows Storage Port Driver Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49685	Windows Search Service Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49693	Microsoft Brokering File System Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49699	Microsoft Office Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49700	Microsoft Word Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49701	Microsoft SharePoint Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49705	Microsoft PowerPoint Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49706	Microsoft SharePoint Server Spoofing Vulnerability	Important	Spoofing	No
CVE-2025-49714	Visual Studio Code Python Extension Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49718	Microsoft SQL Server Information Disclosure Vulnerability	Important	Information Disclosure	No
CVE-2025-49722	Windows Print Spooler Denial of Service Vulnerability	Important	Denial of Service	No
CVE-2025-49724	Windows Connected Devices Platform Service Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49725	Windows Notification Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49727	Win32k Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49729	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49730	Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49732	Windows Graphics Component Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49733	Win32k Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47999	Windows Hyper-V Denial of Service Vulnerability	Important	Denial of Service	No
CVE-2025-49737	Microsoft Teams Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49738	Microsoft PC Manager Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49739	Visual Studio Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-49740	Windows SmartScreen Security Feature Bypass Vulnerability	Important	Security Feature Bypass	No
CVE-2025-49742	Windows Graphics Component Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49744	Windows Graphics Component Elevation of Privilege Vulnerability	Important	Elevation of Privilege	No
CVE-2025-47988	Azure Monitor Agent Remote Code Execution Vulnerability	Important	Remote Code Execution	No
CVE-2025-49760	Windows Storage Spoofing Vulnerability	Moderate	Spoofing	No

Security experts strongly recommend immediate patch deployment, particularly for the SQL Server zero-day and critical Office vulnerabilities.

Organizations should prioritize testing in development environments before production deployment, especially given the extensive scope of this month’s updates affecting core Windows components, Office applications, and server infrastructure.

The July 2025 Patch Tuesday represents one of the largest security updates in recent months, emphasizing the critical importance of maintaining robust patch management processes as threat actors continue to target Microsoft’s ubiquitous software ecosystem.

Stay Updated on Daily Cybersecurity News. Follow us on Google News, LinkedIn, and X.