Internet Shortcut Files Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
CVE tracker
Microsoft Patch Tuesday
What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.
All CVEs – Patch Tuesday June 2025
72 vulnerabilities
Power Automate Elevation of Privilege Vulnerability
Microsoft Dynamics · MSRC
M365 Copilot Information Disclosure Vulnerability
Apps · MSRC
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Windows Schannel Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060526 KB5060525 KB5060999 KB5060842 · MSRC
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5058392 KB5058385 KB5058500 KB5058411 · MSRC
Windows Netlogon Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060842 · MSRC
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Microsoft Dynamics · MSRC
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows SMB Client Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · MSRC
Nuance Digital Engagement Platform Spoofing Vulnerability
Azure · MSRC
Win32k Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows Installer Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows Media Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows SMB Client Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows Installer Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002732 KB5002731 KB5002729 KB5002727 · MSRC
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002732 KB5002731 KB5002729 KB5002727 · MSRC
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office · MSRC
Microsoft PowerPoint Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Office · MSRC
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5058392 KB5058385 KB5058500 KB5058379 · MSRC
Windows SDK Elevation of Privilege Vulnerability
Developer tools (.NET, Visual Studio …) · MSRC
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Microsoft Office · MSRC
.NET and Visual Studio Remote Code Execution Vulnerability
Developer tools (.NET, Visual Studio …) · KB5061935 KB5061936 · MSRC
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
DHCP Server Service Denial of Service Vulnerability
DHCP Server Service Denial of Service Vulnerability
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060842 · MSRC
Windows Recovery Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Visual Studio Remote Code Execution Vulnerability
Developer tools (.NET, Visual Studio …) · MSRC
Microsoft Outlook Remote Code Execution Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533 · MSRC
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.