Microsoft and Adobe Patch Tuesday, July 2025 Security Update Review | Qualys

Summary: Microsoft's July 2025 Patch Tuesday addressed 140 vulnerabilities, including 14 rated critical and 115 rated important, plus one publicly disclosed zero-day and three flaws in Chromium-based Microsoft Edge. Adobe released 13 security advisories covering 60 vulnerabilities across products including ColdFusion, Experience Manager, Illustrator, InDesign and Audition, 38 of them rated critical.
Bottom line: The Microsoft release includes a publicly disclosed zero-day and fixes for flaws in the Windows KDC Proxy Service, SPNEGO Extended Negotiation and Hyper-V that unauthenticated attackers could use to achieve remote code execution, while 38 of Adobe's 60 flaws carry critical severity ratings.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026