Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities

🗓️ 10 Jun 2025 21:45:40Reported by Chetan RaghuprasadType

talosblog🔗 blog.talosintelligence.com👁 21 Views

Microsoft June 2025 update addresses 66 vulnerabilities, including 10 critical, none actively exploited.

Reporter	Title	Published	Views	Family All 267
GithubExploit	Exploit for Race Condition in Microsoft	18 Jun 202506:31	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Microsoft	30 Dec 202509:54	–	githubexploit
Information Security Automation	June Microsoft Patch Tuesday	10 Jun 202521:49	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to data type mixing errors, allows attackers to execute arbitrary code.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Common Log File System Driver for Microsoft Windows operating systems allows attackers to gain increased privileges.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in the incorrect limitation of file names and other resources, allowing attackers to execute arbitrary code.	12 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Netlogon service in Microsoft Windows operating systems allows attackers to escalate their privileges.	13 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.	13 Jun 202500:00	–	bdu_fstec

10 Jun 2025 21:45Current

9.8Critical risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.23185

SSVC

microsoft patch tuesday june 2025 vulnerabilities critical vulnerabilities remote code execution elevation of privilege windows services microsoft windows exploit risks.