Microsoft and Adobe Patch Tuesday, June 2025 Security Update Review | Qualys

Summary: Microsoft's June 2025 Patch Tuesday addressed 69 vulnerabilities, including 10 rated critical and 57 important, plus one zero-day exploited in the wild and one publicly disclosed. Adobe released seven advisories covering 254 vulnerabilities across products including InCopy, Experience Manager, Commerce, InDesign, Acrobat Reader, and Substance 3D tools, 18 of them critical.
Bottom line: The exploited zero-day, CVE-2025-33053, is a WebDAV flaw that researchers say the APT group Stealth Falcon is using to deploy malware, and CISA has set a July 1, 2025 patch deadline for it.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-33053
Related: CVE-2025-33053: Microsoft Windows External Control of File Name or Path Vulnerability Known Exploited Vulnerabilities · Jun 10, 2025
Patch Tuesday, June 2025 Edition Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026