{"id":347001,"date":"2025-06-11T06:33:35","date_gmt":"2025-06-11T13:33:35","guid":{"rendered":"https:\/\/msftnewsnow.com\/?p=347001"},"modified":"2025-06-19T06:23:40","modified_gmt":"2025-06-19T13:23:40","slug":"microsoft-patch-tuesday-june-2025-65-security-fix","status":"publish","type":"post","link":"https:\/\/msftnewsnow.com\/microsoft-patch-tuesday-june-2025-65-security-fix\/","title":{"rendered":"Microsoft Patch Tuesday June 2025: 65+ Security Vulnerabilities Patched, Zero-Day Exploit Fixed"},"content":{"rendered":"
\n
\n

Microsoft\u2019s June 2025 Patch Tuesday<\/a> has arrived, delivering urgent security fixes for a broad range of its products. The company addressed more than 65 vulnerabilities, including a zero-day exploit that was being actively used in cyber espionage campaigns. This month\u2019s updates are critical for both<\/a> enterprise and individual users, reinforcing the importance of timely patching to protect against emerging threats.<\/p>\n

Microsoft Patch Tuesday at a Glance<\/strong><\/h2>\n

\"Microsoft<\/p>\n

This month\u2019s security release is notable<\/a> for its breadth and the severity of the vulnerabilities addressed. Microsoft has fixed at least 65 security flaws (CVEs), with some sources reporting up to 67, depending on the counting methodology and inclusion of third-party patches.<\/span> Of these, approximately 9 to 11 are rated Critical, and the rest are classified as Important in severity.<\/span><\/p>\n

The standout fix is for CVE-2025-33053, a remote code execution (RCE) vulnerability in the WebDAV (Web Distributed Authoring and Versioning) component of Windows. This flaw was being actively exploited by the advanced persistent threat (APT) group known as Stealth Falcon (also called FruityArmor), which has a history of leveraging Windows zero-days for espionage purposes.<\/span><\/p>\n

The Zero-Day Threat: CVE-2025-33053<\/strong><\/h2>\n

CVE-2025-33053<\/strong> is a remote code execution vulnerability in WebDAV, a protocol designed to extend HTTP for file management. While WebDAV has been deprecated since 2023 and is not enabled by default, Microsoft has chosen to patch the flaw across both current and legacy Windows and Windows Server versions, including some that are officially out of support.<\/span><\/p>\n

The vulnerability has been exploited in real-world attacks, most notably in March 2025, when Stealth Falcon targeted a major defense organization in Turkey. The attack began with a phishing email containing a malicious .url<\/code> file disguised as a PDF document related to military equipment damage. When executed, the file exploited the zero-day to launch malware from an attacker-controlled WebDAV server.<\/span><\/p>\n

Attack Chain Details:<\/strong><\/p>\n