# Microsoft patches June 2025 critical vulnerabilities

Published: 2026-06-09 · Severity: routine · Sectors: government-national, financial-services, defense, education, healthcare, technology
Canonical: https://vorant.io/reports/5f938284-92a8-5c04-830c-0b0a661f9dd8/microsoft-patches-june-2025-critical-vulnerabilities

> Microsoft issued critical patches for multiple products including Windows and Office; no active exploitation reported.

Microsoft released critical security patches on June 10, 2025, addressing multiple vulnerabilities across a wide range of products. The most severe vulnerabilities could allow remote code execution in the context of the logged-on user, potentially enabling attackers to install programs, view or modify data, or create new accounts depending on the privileges of the compromised user. Affected components span core Windows functionality including cryptographic services, kernel, LSASS, remote access services, SMB, and DHCP, as well as Office applications, Visual Studio, Remote Desktop Client, and other enterprise software. The advisory also lists less common components like the Nuance Digital Engagement Platform and Power Automate.

According to CIS advisory 2025-056, there are currently no confirmed reports of these vulnerabilities being actively exploited in the wild. The advisory recommends immediate patching after appropriate testing, implementing least-privilege access controls to limit attacker capabilities post-compromise, and deploying endpoint detection capabilities. Organizations should prioritize testing and deployment of these patches, particularly for systems running administrative users or in critical infrastructure roles, as successful exploitation could grant attackers full system control.

Source reporting: https://www.cisecurity.org/advisory/critical-patches-issued-for-microsoft-products-june-10-2025_2025-056

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/5f938284-92a8-5c04-830c-0b0a661f9dd8/microsoft-patches-june-2025-critical-vulnerabilities.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup