Azure OpenAI Elevation of Privilege Vulnerability
Azure
Patch Tuesday
Patch Tuesday August 2025 – known issues, zero-days and what to do
On 12 Aug 2025 Microsoft fixed 116 vulnerabilities – critical: 19, already exploited (zero-days): 0. Known issues with the updates: none known.
116vulnerabilities
19critical
0zero-days
0known issues
What to do now
- 19 critical vulnerabilities (mainly Windows, Microsoft Office, Azure) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
According to Microsoft, no vulnerability of this month is being exploited yet.
Critical vulnerabilities (19)
Windows Graphics Component Remote Code Execution Vulnerability
Windows · KB5063878 KB5064010
Azure Databricks Elevation of Privilege Vulnerability
Azure
GDI+ Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates), Microsoft Office · KB5063877 KB5063880 KB5063812 KB5063709
Azure Portal Elevation of Privilege Vulnerability
Azure
Microsoft PC Manager Elevation of Privilege Vulnerability
Apps
Show 13 more critical vulnerabilities
Windows NTLM Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5063877 KB5063880 KB5063812 KB5063709
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002756
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002771 KB5002772 KB5002769 KB5002770
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002756
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
Apps
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5063877 KB5063880 KB5063812 KB5063709
Azure Virtual Machines Spoofing Vulnerability
Azure
DirectX Graphics Kernel Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5063880 KB5063812 KB5063875 KB5063878
Azure Virtual Machines Information Disclosure Vulnerability
Azure
Azure Stack Hub Information Disclosure Vulnerability
Azure
Windows Hyper-V Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5065428 KB5065432 KB5065306 KB5065429
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
Apps
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5063878 | Windows | 61 | none known |
| KB5063880 | Windows | 56 | none known |
| KB5063812 | Windows | 56 | none known |
| KB5063877 | Windows | 54 | none known |
| KB5063875 | Windows | 47 | none known |
| KB5063709 | Windows | 44 | none known |
| KB5064010 | Windows | 20 | none known |
| KB5063899 | Windows | 15 | none known |
| KB5002752 | Microsoft Office | 5 | none known |
| KB5002771 | Microsoft Office | 4 | none known |
| KB5002769 | Microsoft Office | 4 | none known |
| KB5063760 | SQL Server | 4 | none known |
Show 45 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5063758 | SQL Server | 4 | none known |
| KB5063762 | SQL Server | 4 | none known |
| KB5063761 | SQL Server | 4 | none known |
| KB5063759 | SQL Server | 4 | none known |
| KB5063756 | SQL Server | 4 | none known |
| KB5063222 | Windows ESU (Extended Security Updates) | 4 | none known |
| KB5063223 | Windows ESU (Extended Security Updates) | 4 | none known |
| KB5063221 | Windows ESU (Extended Security Updates) | 4 | none known |
| KB5063224 | Windows ESU (Extended Security Updates) | 4 | none known |
| KB5002758 | Microsoft Office | 4 | none known |
| KB5062557 | Windows | 4 | none known |
| KB5062572 | Windows | 4 | none known |
| KB5062553 | Windows | 4 | none known |
| KB5002763 | Microsoft Office | 3 | none known |
| KB5062570 | Windows | 3 | none known |
| KB5002756 | Microsoft Office | 2 | none known |
| KB5002772 | Microsoft Office | 2 | none known |
| KB5002770 | Microsoft Office | 2 | none known |
| KB5063814 | SQL Server | 2 | none known |
| KB5062554 | Windows | 2 | none known |
| KB5062552 | Windows | 2 | none known |
| KB5062560 | Windows | 2 | none known |
| KB5063889 | Windows | 2 | none known |
| KB5065428 | Windows | 1 | none known |
| KB5065432 | Windows | 1 | none known |
| KB5065306 | Windows | 1 | none known |
| KB5065429 | Windows | 1 | none known |
| KB5065431 | Windows | 1 | none known |
| KB5065426 | Windows | 1 | none known |
| KB5059086 | Microsoft Dynamics | 1 | none known |
| KB5002773 | Microsoft Office | 1 | none known |
| KB5002765 | Microsoft Office | 1 | none known |
| KB5047155 | Windows ESU (Extended Security Updates) | 1 | none known |
| KB5050672 | Windows ESU (Extended Security Updates) | 1 | none known |
| KB5050674 | Windows ESU (Extended Security Updates) | 1 | none known |
| KB5050673 | Windows ESU (Extended Security Updates) | 1 | none known |
| KB5062624 | Windows | 1 | none known |
| KB5064483 | Microsoft Dynamics | 1 | none known |
| KB5058392 | Windows | 1 | none known |
| KB5058385 | Windows | 1 | none known |
| KB5058500 | Windows | 1 | none known |
| KB5058379 | Windows | 1 | none known |
| KB5058405 | Windows | 1 | none known |
| KB5058411 | Windows | 1 | none known |
| KB5062597 | Windows | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.