Microsoft and Adobe Patch Tuesday, May 2025 Security Update Review | Qualys

Summary: Microsoft's May 2025 Patch Tuesday addressed 76 vulnerabilities, including five critical and 66 important severity issues, plus five zero-day vulnerabilities exploited in the wild and one publicly disclosed vulnerability. Adobe released 13 advisories covering 40 vulnerabilities across products including ColdFusion, Photoshop, and InDesign, with 32 rated critical and potential for privilege escalation and arbitrary code execution.
Bottom line: CISA added five of the exploited Microsoft flaws - CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-30397, and CVE-2025-32709 - to its Known Exploited Vulnerabilities Catalog and set a patch deadline of June 3, 2025, so the window to close them is already running.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-30397 CVE-2025-30400 CVE-2025-32701 CVE-2025-32706
Related: Microsoft Patch Tuesday for May 2025 — Snort rules and prominent vulnerabilities Cyber Risks ·
Patch Tuesday, May 2025 Edition Cyber Risks ·
CVE-2025-30400: Microsoft Windows DWM Core Library Use-After-Free Vulnerability Known Exploited Vulnerabilities · May 13, 2025