Overview

On June 11, NSFOCUS CERT detected that Microsoft released a security update patch for June, fixing 67 security issues involving widely used products such as Windows, Microsoft Office, Azure, and Microsoft Visual Studio, including high-risk vulnerability types such as privilege escalation and remote code execution.

Of the vulnerabilities fixed in Microsoft’s monthly update this month, 11 were critical and 58 were important in severity. These include 1 vulnerability that has been detected for wild exploitation:

WEBDAV Remote Code Execution Vulnerability (CVE-2025-33053)

Please update the patch as soon as possible for protection. For a complete list of vulnerabilities, please refer to the appendix.

Reference link:

https://msrc.microsoft.com/update-guide/releaseNote/2025-Jun

Key Vulnerabilities

Based on the product popularity and vulnerability importance, this update contains vulnerabilities with greater impact. Relevant users are requested to pay special attention:

Windows Schannel Remote Code Execution Vulnerability (CVE-2025-29828):

Windows Schannel has a remote code execution vulnerability. Due to a memory leak in the Windows Encryption Service, an unauthenticated attacker could execute arbitrary code by sending a large number of malicious sharded ClientHello messages to the target server connected to TLS. CVSS score 8.1.

Official announcement link:

https://msrc.microsoft.com/update-guide/zh-cn/vulnerability/CVE-2025-29828

Microsoft Word Remote Code Execution Vulnerability (CVE-2025-32717):

Microsoft Word has a remote code execution vulnerability. Due to a heap-based buffer overflow vulnerability in Microsoft Office Word, an unauthenticated attacker can craft malicious RTF files that trick users into opening or previewing panes, thereby executing arbitrary code in the user’s context. CVSS score 8.4.

Official announcement link:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32717

Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability (CVE-2025-33053):

A remote code execution vulnerability exists in Web Distributed Authoring and Versioning (WEBDAV). Because WebDAV mishandles file paths in links, an unauthenticated attacker can externally control the file name or path in WebDAV to trick users into clicking on a specially crafted link and executing arbitrary code. CVSS score 8.8.

Official announcement link:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVE-2025-33064):

A remote code execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS). Due to a heap-based buffer overflow vulnerability in Windows Routing and Remote Access Services (RRAS), an unauthenticated remote attacker can execute code locally. CVSS score 8.8.

Official announcement link:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33064

Power Automate Privilege Escalation Vulnerability (CVE-2025-47966):

Power Automate has a privilege escalation vulnerability. Due to the leakage of sensitive information in Power Automate, attackers can obtain this sensitive information and achieve privilege escalation. CVSS score 9.8.

Official announcement link:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47966

Microsoft Word Remote Code Execution Vulnerability (CVE-2025-47957):

Microsoft Word has a remote code execution vulnerability. Due to a “use after release” problem in Microsoft Office Word, an unauthenticated attacker can execute code locally. CVSS score 8.4.

Official announcement link:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47957

Windows Netlogon Privilege Escalation Vulnerability (CVE-2025-33070):

Windows Netlogon has a privilege escalation vulnerability. Because uninitialized resources are used in Windows Netlogon, an attacker can gain domain administrator privileges by sending a specially crafted authentication request to the domain controller. CVSS score 8.1.

Official announcement link:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33070

Scope of Impact

The following are the affected product versions of some key vulnerabilities. For the scope of products affected by other vulnerabilities, please refer to the official announcement link.

Mitigation

At present, Microsoft has officially released security patches to fix the above vulnerabilities for supported product versions. It is strongly recommended that affected users install patches as soon as possible for protection. The official download link:

https://msrc.microsoft.com/update-guide/releaseNote/2025-Jun

Note: Patch updates for Windows Update may fail due to network problems, computer environment problems, etc. After installing the patch, users should check whether the patch has been successfully updated in time.

Right-click the Windows icon, select “Settings (N)”, select “Update and Security”-“Windows Update”, view the prompt information on this page, or click “View Update History” to view the historical update status.

For updates that have not been successfully installed, you can click the update name to jump to the Microsoft official download page. It is recommended that users click the link on this page and go to the “Microsoft Update Catalog” website to download the independent program package and install it.

Appendix

Statement

This advisory is only used to describe a potential risk. NSFOCUS does not provide any commitment or promise on this advisory. NSFOCUS and the author will not bear any liability for any direct and/or indirect consequences and losses caused by transmitting and/or using this advisory. NSFOCUS reserves all the rights to modify and interpret this advisory. Please include this statement paragraph when reproducing or transferring this advisory. Do not modify this advisory, add/delete any information to/from it, or use this advisory for commercial purposes without permission from NSFOCUS.

About NSFOCUS

NSFOCUS, a pioneering leader in cybersecurity, is dedicated to safeguarding telecommunications, Internet service providers, hosting providers, and enterprises from sophisticated cyberattacks.

Founded in 2000, NSFOCUS operates globally with over 4000 employees at two headquarters in Beijing, China, and Santa Clara, CA, USA, and over 50 offices worldwide. It has a proven track record of protecting over 25% of the Fortune Global 500 companies, including four of the five largest banks and six of the world’s top ten telecommunications companies.

Leveraging technical prowess and innovation, NSFOCUS delivers a comprehensive suite of security solutions, including the Intelligent Security Operations Platform (ISOP) for modern SOC, DDoS Protection, Continuous Threat Exposure Management (CTEM) Service and Web Application and API Protection (WAAP). All the solutions and services are augmented by the Security Large Language Model (SecLLM), ML, patented algorithms and other cutting-edge research achievements developed by NSFOCUS.

The post Microsoft’s Security Update in June of High-Risk Vulnerability Notice for Multiple Products appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

*** This is a Security Bloggers Network syndicated blog from NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks. authored by NSFOCUS. Read the original post at: https://nsfocusglobal.com/microsofts-security-update-in-june-of-high-risk-vulnerability-notice-for-multiple-products/