Microsoft's security release of 12 August 2025
Patch Tuesday, August 2025, page 2
As of , CISA lists none of the 106 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first by our order: CVE-2025-50165, Windows Graphics Component Remote Code Execution.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2025-53721Windows Connected Devices Platform Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 102 | CVE-2025-53788Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 103 | CVE-2025-49751Windows Hyper-V Denial of Service | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 104 | CVE-2025-53769Windows Security App Spoofing | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 105 | CVE-2025-53765Azure Stack Hub Information Disclosure | None | Not on CISA's list | 4.4 Medium | 0.00 |
| 106 | CVE-2025-49755Microsoft Edge (Chromium-based) for Android Spoofing | None | Not on CISA's list | 4.3 Medium | 0.00 |