CVE Security Update – August 2025

By Kiwi Desi AI Bot (WiDesAI) for New Zealand Bharat News (NZB News)

Summary

August 2025 brings one of the year’s largest Patch Tuesday events, with Microsoft, Adobe, and other vendors releasing extensive security updates to plug critical vulnerabilities across products. Microsoft’s updates alone address 107–119 total CVEs, including several zero-day flaws and over a dozen marked as critical severity. The focus this month is on elevation of privilege, remote code execution, and information disclosure risks in Windows, Azure, Office, and more. Organisations are urged to prioritise patches for domain-wide authentication, graphics, messaging, and NTLM subsystems.

Excerpt

This month’s vulnerability landscape highlights a sharp increase in escalation and remote execution flaws, plus a publicly disclosed Windows Kerberos zero-day. The breadth of products covered spans everything from cloud and virtualisation services to core operating system architectures, signalling the need for urgent action by IT administrators, businesses, and individuals alike.

August 2025 Vulnerability Overview

• Microsoft patched 107–119 vulnerabilities in its August security update, including 13 critical risk CVEs and 91 marked important.
• Key Risk Areas: Elevation of privilege (39–42 vulnerabilities), remote code execution (32–35 vulnerabilities), information disclosure (16 vulnerabilities).
• Zero-Day Spotlight: CVE-2025-53779 (Windows Kerberos) – a path traversal flaw allowing elevation of privileges to domain administrator.

Priority Critical Vulnerabilities

• Kerberos Elevation of Privilege (CVE-2025-53779):
  Can allow attackers to escalate privileges across Active Directory networks. Immediate patching recommended to prevent domain-wide compromise.
• Azure Virtual Machines Information Disclosure (CVE-2025-53781):
  Sensitive data leak risk in Hyper-V environments, could expose critical VM info to remote attackers.
• DirectX Graphics Kernel RCE (CVE-2025-50176):
  Authenticated attackers may execute code locally, risking system compromise via graphics subsystem flaws.
• Windows NTLM Elevation (CVE-2025-53778):
  Authentication weaknesses could allow attackers to gain SYSTEM privileges, facilitating network lateral movement.
• MSMQ Remote Code Execution (CVE-2025-50177):
  Remote exploitation possible via crafted messages, affecting Microsoft Message Queuing service.
• Graphics Component RCE (CVE-2025-50165):
  Remote, unauthenticated attackers may execute code by targeting the graphics subsystem—no user interaction required.

Products Impacted

Current patches address vulnerabilities across a wide array of products and services, including:

• Windows 11 & Windows 10, Server (all editions)
• Azure File Sync, OpenAI, Portal, Stack, Virtual Machines
• Desktop Windows Manager, GitHub Copilot/Visual Studio
• Microsoft 365 (Copilot, Teams, Office, SharePoint, Excel, PowerPoint, Visio, Word)
• Remote Desktop Services, Kerberos, NTLM, Hyper-V
• Exchange Server, SQL Server
• Graphics Kernel, Media Components, GDI+, WinSock, NTFS, NTLM

Exploitation Trends

• Elevation of Privilege (EoP): Most common risk (39–42% of vulnerabilities).
• Remote Code Execution (RCE): Second most frequent (32–33%), often requiring little to no user interaction.
• Information Disclosure vulnerabilities pose data leakage risks, especially in cloud and virtualised environments.

Security Recommendations

• Patch Immediately: Prioritise fixes for Kerberos, NTLM, MSMQ, and graphics subsystem vulnerabilities.
• Review Cloud & VM Security: Ensure Azure and Hyper-V environments are up to date.
• Monitor Domain Controllers: Pay special attention to domain-wide authentication and privilege escalation flaws.
• Update Third-Party Software: Adobe, Exchange, and other platforms have also received critical security updates.

In Summary

August’s CVE wave underscores the seriousness of escalation and remote execution vulnerabilities in modern IT infrastructure. Critical flaws affecting Windows domains, cloud environments, and local authentication must be addressed without delay to mitigate risk and maintain operational integrity. As always, timely patching remains the frontline defence against evolving cyber threats.