Microsoft’s July 2025 Patch Tuesday Addresses 128 CVEs (CVE-2025-49719)

On July 8, Microsoft released its July 2025 Patch Tuesday release which patched 128 CVEs with 12 rated critical, and 115 rated important and one rated as moderate. Included in this release was a patch to address one zero-day vulnerability which was publicly disclosed prior to patches being released.

This month’s update included patches for CVE-2025-49719, a zero-day information disclosure vulnerability in Microsoft SQL Server. It was assigned a CVSSv3 score of 7.5 and is rated important. An unauthenticated attacker could exploit this vulnerability to obtain uninitialized memory. It is assessed as “Exploitation Less Likely” according to Microsoft’s Exploitability Index.

This month’s update includes patches for:

• Azure Monitor Agent
• Capability Access Management Service (camsvc)
• HID class driver
• Kernel Streaming WOW Thunk Service Driver
• Microsoft Brokering File System
• Microsoft Graphics Component
• Microsoft Input Method Editor (IME)
• Microsoft Intune
• Microsoft MPEG-2 Video Extension
• Microsoft Office
• Microsoft Office Excel
• Microsoft Office PowerPoint
• Microsoft Office SharePoint
• Microsoft Office Word
• Microsoft PC Manager
• Microsoft Teams
• Microsoft Windows QoS scheduler
• Microsoft Windows Search Component
• Office Developer Platform
• Remote Desktop Client
• Role: Windows Hyper-V
• SQL Server
• Service Fabric
• Storage Port Driver
• Universal Print Management Service
• Virtual Hard Disk (VHDX)
• Visual Studio
• Visual Studio Code Python extension
• Windows Ancillary Function Driver for WinSock
• Windows AppX Deployment Service
• Windows BitLocker
• Windows Connected Devices Platform Service
• Windows Cred SSProvider Protocol
• Windows Cryptographic Services
• Windows Event Tracing
• Windows Fast FAT Driver
• Windows GDI
• Windows Imaging Component
• Windows KDC Proxy Service (KPSSVC)
• Windows Kerberos
• Windows Kernel
• Windows MBT Transport driver
• Windows Media
• Windows NTFS
• Windows Netlogon
• Windows Notification
• Windows Performance Recorder
• Windows Print Spooler Components
• Windows Remote Desktop Licensing Service
• Windows Routing and Remote Access Service (RRAS)
• Windows SMB
• Windows SPNEGO Extended Negotiation
• Windows SSDP Service
• Windows Secure Kernel Mode
• Windows Shell
• Windows SmartScreen
• Windows StateRepository API
• Windows Storage VSP Driver
• Windows TCP/IP
• Windows TDX.sys
• Windows Universal Plug and Play (UPnP) Device Host
• Windows Update Service
• Windows User-Mode Driver Framework Host
• Windows Virtualization-Based Security (VBS) Enclave
• Windows Visual Basic Scripting
• Windows Win32K GRFX
• Windows Win32K ICOMP
• Workspace Broker

For more information, please visit our blog.