Microsoft has released its May 2025 Patch Tuesday updates, fixing 72 security vulnerabilities, including five zero-day flaws that are actively being exploited and two that were publicly disclosed before patches were available.
Out of the total, six vulnerabilities are rated Critical, with five allowing remote code execution and one being an information disclosure flaw.
Here’s a breakdown of the patched vulnerabilities:
- 17 Elevation of Privilege
- 2 Security Feature Bypass
- 28 Remote Code Execution
- 15 Information Disclosure
- 7 Denial of Service
- 2 Spoofing
These fixes do not include issues previously addressed in Microsoft Edge, Azure, Dataverse, or Mariner.
Users running Windows 11 or Windows 10 can check out the latest non-security improvements in updates KB5058411, KB5058405, and KB5058379, respectively.
