Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft Office · KB5002760 KB5002759 KB5002754 KB5002753
Patch Tuesday
Patch Tuesday July 2025 – known issues, zero-days and what to do
On 8 Jul 2025 Microsoft fixed 137 vulnerabilities – critical: 17, already exploited (zero-days): 1. Known issues with the updates: none known.
137vulnerabilities
17critical
1zero-days
0known issues
What to do now
- Zero-day first: one vulnerability is already being exploited (CVE-2025-53770) – install the update as soon as possible, starting with servers and exposed systems.
- 17 critical vulnerabilities (mainly Windows, Microsoft Office, Azure) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
Critical vulnerabilities (16)
Azure Machine Learning Elevation of Privilege Vulnerability
Azure
Azure Machine Learning Elevation of Privilege Vulnerability
Azure
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5062557 KB5062572 KB5062554 KB5062552
Azure DevOps Server Elevation of Privilege Vulnerability
Developer tools (.NET, Visual Studio …)
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Office · KB5002744 KB5002741
Microsoft Purview Elevation of Privilege Vulnerability
Microsoft Office
Show 10 more critical vulnerabilities
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5062557 KB5062572 KB5062554 KB5062552
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002742
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002742
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002742 KB5002749 KB5002740
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5060531 KB5060526 KB5060842 KB5060118
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002742
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002742
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002744 KB5002743 KB5002741 KB5002739
Azure Machine Learning Elevation of Privilege Vulnerability
Azure
Windows Imaging Component Information Disclosure Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5062557 KB5062572 KB5062554 KB5062552
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5062553 | Windows | 96 | none known |
| KB5062570 | Windows | 93 | none known |
| KB5062572 | Windows | 90 | none known |
| KB5062557 | Windows | 88 | none known |
| KB5062552 | Windows | 75 | none known |
| KB5062554 | Windows | 71 | none known |
| KB5062560 | Windows | 19 | none known |
| KB5062624 | Windows | 16 | none known |
| KB5002742 | Microsoft Office | 7 | none known |
| KB5002744 | Microsoft Office | 4 | none known |
| KB5002741 | Microsoft Office | 4 | none known |
| KB5002749 | Microsoft Office | 3 | none known |
Show 33 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5002740 | Microsoft Office | 3 | none known |
| KB5058713 | SQL Server | 3 | none known |
| KB5058712 | SQL Server | 3 | none known |
| KB5002760 | Microsoft Office | 2 | none known |
| KB5002759 | Microsoft Office | 2 | none known |
| KB5002754 | Microsoft Office | 2 | none known |
| KB5002753 | Microsoft Office | 2 | none known |
| KB5002768 | Microsoft Office | 2 | none known |
| KB5058722 | SQL Server | 2 | none known |
| KB5058721 | SQL Server | 2 | none known |
| KB5002746 | Microsoft Office | 2 | none known |
| KB5002751 | Microsoft Office | 2 | none known |
| KB5060531 | Windows | 1 | none known |
| KB5060526 | Windows | 1 | none known |
| KB5060842 | Windows | 1 | none known |
| KB5060118 | Windows | 1 | none known |
| KB5061010 | Windows | 1 | none known |
| KB5061059 | Windows | 1 | none known |
| KB5002743 | Microsoft Office | 1 | none known |
| KB5002739 | Microsoft Office | 1 | none known |
| KB5002745 | Microsoft Office | 1 | none known |
| KB5062597 | Windows | 1 | none known |
| KB5002734 | Microsoft Office | 1 | none known |
| KB5062618 | Windows | 1 | none known |
| KB5058716 | SQL Server | 1 | none known |
| KB5058718 | SQL Server | 1 | none known |
| KB5058717 | SQL Server | 1 | none known |
| KB5058714 | SQL Server | 1 | none known |
| KB5001941 | Microsoft Office | 1 | none known |
| KB4464583 | Microsoft Office | 1 | none known |
| KB5002747 | Microsoft Office | 1 | none known |
| KB5002655 | Microsoft Office | 1 | none known |
| KB5063035 | Developer tools (.NET, Visual Studio …) | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.