Internet Shortcut Files Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533
Patch Tuesday
Patch Tuesday June 2025 – known issues, zero-days and what to do
On 10 Jun 2025 Microsoft fixed 72 vulnerabilities – critical: 13, already exploited (zero-days): 1. Known issues with the updates: none known.
72vulnerabilities
13critical
1zero-days
0known issues
What to do now
- Zero-day first: one vulnerability is already being exploited (CVE-2025-33053) – install the update as soon as possible, starting with servers and exposed systems.
- 13 critical vulnerabilities (mainly Windows, Microsoft Office, Developer tools (.NET, Visual Studio …)) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
Critical vulnerabilities (13)
Power Automate Elevation of Privilege Vulnerability
Microsoft Dynamics
M365 Copilot Information Disclosure Vulnerability
Apps
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft Office · KB5002732 KB5002729 KB5002736
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002730
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002730
Show 7 more critical vulnerabilities
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002616
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002730
Windows Schannel Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060526 KB5060525 KB5060999 KB5060842
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5058392 KB5058385 KB5058500 KB5058411
Windows Netlogon Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060533
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060525 KB5060842
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Microsoft Dynamics
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5060526 | Windows | 38 | none known |
| KB5060525 | Windows | 38 | none known |
| KB5060842 | Windows | 38 | none known |
| KB5060531 | Windows | 37 | none known |
| KB5060999 | Windows | 34 | none known |
| KB5060533 | Windows | 33 | none known |
| KB5060841 | Windows | 6 | none known |
| KB5060118 | Windows | 5 | none known |
| KB5002732 | Microsoft Office | 5 | none known |
| KB5002729 | Microsoft Office | 5 | none known |
| KB5002730 | Microsoft Office | 4 | none known |
| KB5058411 | Windows | 3 | none known |
Show 19 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5002736 | Microsoft Office | 3 | none known |
| KB5058392 | Windows | 2 | none known |
| KB5058385 | Windows | 2 | none known |
| KB5058500 | Windows | 2 | none known |
| KB5058497 | Windows | 2 | none known |
| KB5058405 | Windows | 2 | none known |
| KB5002731 | Microsoft Office | 2 | none known |
| KB5002727 | Microsoft Office | 2 | none known |
| KB5002710 | Microsoft Office | 2 | none known |
| KB5058384 | Windows | 1 | none known |
| KB5002616 | Microsoft Office | 1 | none known |
| KB5061935 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5061936 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5058379 | Windows | 1 | none known |
| KB5061010 | Windows | 1 | none known |
| KB5002728 | Microsoft Office | 1 | none known |
| KB5002735 | Microsoft Office | 1 | none known |
| KB5002683 | Microsoft Office | 1 | none known |
| KB5002689 | Microsoft Office | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.