In June 2025, Microsoft’s Patch Tuesday update addressed over 70 critical vulnerabilities, including actively exploited zero-day flaws. This update is crucial for all Microsoft users to ensure their devices are secure.
Among the most significant fixes are five zero-day vulnerabilities that were actively being exploited. These include a use-after-free vulnerability in the Microsoft DWM Core Library, allowing attackers to gain SYSTEM privileges, and a type confusion vulnerability in the Microsoft Scripting Engine, which could enable remote code execution via a crafted URL. Another use-after-free flaw affected the Windows Ancillary Function Driver for WinSock, granting elevated privileges to attackers. Similarly, the Windows Common Log File System Driver contained vulnerabilities allowing SYSTEM privilege escalation due to improper input validation.
Additionally, Microsoft addressed two other significant vulnerabilities that were public before being fixed. One involved improper authentication in Microsoft Defender for Identity, allowing spoofing, while the other was a command injection vulnerability in Visual Studio enabling unauthorized code execution.
This update also resolved 11 critical vulnerabilities, including remote code execution, privilege escalation, and information disclosure issues. In total, 59 important severity vulnerabilities were patched, covering denial of service, privilege escalation, information disclosure, remote code execution, spoofing, and security feature bypass issues.
As this update bundle does not address any low-severity vulnerabilities, it remains an essential security update. Microsoft automatically rolls out these updates, but users are advised to manually check for updates to ensure their systems are fully protected, particularly against the zero-day vulnerabilities under attack.
