Microsoft Patch Tuesday for July 2025 — Snort rules and prominent vulnerabilities
Summary: Microsoft's July 2025 security update covers 132 vulnerabilities, 14 of them rated critical, with none reported as actively exploited in the wild. Eleven of the critical entries are remote code execution flaws in Windows services and applications, including KDC Proxy Service, Office and SharePoint, among them CVE-2025-47981 in the SPNEGO Extended Negotiation Security Mechanism with a CVSS score of 9.8.
Why it matters: CVE-2025-47981 carries a 9.8 score, low attack complexity and exploitation assessed as more likely, and it affects Windows client machines from version 1607 onward because a GPO allowing PKU2U authentication requests to use online identities is enabled by default. CVE-2025-49704 in SharePoint needs only Site Member permission and is rated low complexity with exploitation more likely.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-47980CVE-2025-47981CVE-2025-48822CVE-2025-49695CVE-2025-49696CVE-2025-49697CVE-2025-49698CVE-2025-49702CVE-2025-49703CVE-2025-49704CVE-2025-49717CVE-2025-49735
- Related
- Microsoft Patch Tuesday, July 2025 Edition Cyber Risks ·CVE-2025-49704: Microsoft Share Point Code Injection Vulnerability Known Exploited Vulnerabilities · Jul 22, 2025