Microsoft’s June 2025 Patch Tuesday addressed a total of 66–67 vulnerabilities across its product suite, including Windows, Microsoft Office, and related components.

Overview of the June 2025 Microsoft Patch Tuesday

Microsoft’s June 2025 Patch Tuesday addressed a total of 66–67 vulnerabilities across its product suite, including Windows, Microsoft Office, and related components. The update is notable for patching a critical zero-day vulnerability in the Web Distributed Authoring and Versioning (WEBDAV) protocol that was actively exploited in the wild.

Key Details on the WEBDAV Zero-Day (CVE-2025-33053)

• Nature of the Vulnerability: CVE-2025-33053 is a remote code execution (RCE) flaw in WEBDAV, with a CVSS score of 8.8. The vulnerability can be exploited if a user is tricked into clicking a specially crafted URL, enabling an attacker to execute arbitrary code on the victim’s system over a network.
• Discovery and Exploitation: The flaw was discovered by Check Point researchers Alexandra Gofman and David Driker. It is the first zero-day vulnerability disclosed in the WebDAV standard.
• Active Exploitation: The threat actor Stealth Falcon (also known as FruityArmor) has been linked to the exploitation of this vulnerability. This group is known for targeting government and defense entities, particularly in the Middle East and Africa, and has a history of using Windows zero-days for espionage.
• Attack Method: Stealth Falcon used spear-phishing emails with links to malicious WebDAV servers. Upon clicking the link, the victim’s system executed files hosted by the attacker, leveraging a legitimate Windows tool with a manipulated working directory.
• Targeted Attacks: The exploitation has been highly targeted, affecting specific organizations rather than being widespread. Notably, a defense company in Turkey was targeted in March 2025.

Breakdown of the June 2025 Vulnerabilities

• Severity Ratings:
• 10–11 vulnerabilities rated as Critical
• 56 rated as Important
• Types of Vulnerabilities:
• 25–26 remote code execution (RCE) flaws
• 17 information disclosure flaws
• 13–14 privilege escalation flaws
• Others include security feature bypass, denial of service, and spoofing

Additional Context

• Other Updates: Alongside the WEBDAV zero-day, Microsoft also patched vulnerabilities in Office, SharePoint, Windows Kernel, Netlogon, and more.
• Edge Browser: The patch count does not include 13 vulnerabilities fixed in the Chromium-based Edge browser earlier in the month.
• Urgency and Recommendations: The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-33053 to its catalog of known exploited vulnerabilities, urging organizations to prioritize patching.

This release consists of the following 68 Microsoft CVEs:

Tag	CVE	Base Score	CVSS Vector	Exploitability	FAQs?	Workarounds?	Mitigations?
Windows Storage Management Provider	CVE-2025-24065	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Storage Management Provider	CVE-2025-24068	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Storage Management Provider	CVE-2025-24069	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Cryptographic Services	CVE-2025-29828	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
.NET and Visual Studio	CVE-2025-30399	7.5	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Remote Desktop Services	CVE-2025-32710	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
M365 Copilot	CVE-2025-32711	9.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Win32K – GRFX	CVE-2025-32712	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Common Log File System Driver	CVE-2025-32713	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Windows Installer	CVE-2025-32714	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Remote Desktop Client	CVE-2025-32715	6.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Media	CVE-2025-32716	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Microsoft Office Word	CVE-2025-32717	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Windows SMB	CVE-2025-32718	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Management Provider	CVE-2025-32719	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Management Provider	CVE-2025-32720	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Recovery Driver	CVE-2025-32721	7.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Port Driver	CVE-2025-32722	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Local Security Authority Subsystem Service (LSASS)	CVE-2025-32724	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	No	No	No
Windows DHCP Server	CVE-2025-32725	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows DHCP Server	CVE-2025-33050	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	No	No	No
Windows DWM Core Library	CVE-2025-33052	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
WebDAV	CVE-2025-33053	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	Exploitation Detected	Yes	No	No
Windows Storage Management Provider	CVE-2025-33055	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Microsoft Local Security Authority Server (lsasrv)	CVE-2025-33056	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	No	No	No
Windows Local Security Authority (LSA)	CVE-2025-33057	6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	No	No	No
Windows Storage Management Provider	CVE-2025-33058	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Storage Management Provider	CVE-2025-33059	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Management Provider	CVE-2025-33060	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Management Provider	CVE-2025-33061	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Management Provider	CVE-2025-33062	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Management Provider	CVE-2025-33063	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Routing and Remote Access Service (RRAS)	CVE-2025-33064	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Storage Management Provider	CVE-2025-33065	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Routing and Remote Access Service (RRAS)	CVE-2025-33066	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows Kernel	CVE-2025-33067	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Standards-Based Storage Management Service	CVE-2025-33068	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	No	No	No
App Control for Business (WDAC)	CVE-2025-33069	5.1	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Netlogon	CVE-2025-33070	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Windows KDC Proxy Service (KPSSVC)	CVE-2025-33071	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Windows SMB	CVE-2025-33073	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Installer	CVE-2025-33075	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Shell	CVE-2025-47160	5.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office	CVE-2025-47162	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Microsoft Office SharePoint	CVE-2025-47163	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office	CVE-2025-47164	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Microsoft Office Excel	CVE-2025-47165	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Microsoft Office SharePoint	CVE-2025-47166	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office	CVE-2025-47167	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Microsoft Office Word	CVE-2025-47168	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office Word	CVE-2025-47169	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office Word	CVE-2025-47170	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office Outlook	CVE-2025-47171	6.7	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Microsoft Office SharePoint	CVE-2025-47172	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office	CVE-2025-47173	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Microsoft Office Excel	CVE-2025-47174	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office PowerPoint	CVE-2025-47175	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office Outlook	CVE-2025-47176	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Microsoft Office	CVE-2025-47953	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Remote Access Connection Manager	CVE-2025-47955	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Security App	CVE-2025-47956	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Microsoft Office Word	CVE-2025-47957	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Visual Studio	CVE-2025-47959	7.1	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Unlikely	Yes	No	No
Windows SDK	CVE-2025-47962	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation More Likely	Yes	No	No
Power Automate	CVE-2025-47966	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	N/A	Yes	No	No
Microsoft AutoUpdate (MAU)	CVE-2025-47968	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Windows Hello	CVE-2025-47969	4.4	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No
Nuance Digital Engagement Platform	CVE-2025-47977	7.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C	Exploitation Less Likely	Yes	No	No