# Microsoft June 2025 security updates include actively exploited CVE

Published: 2025-06-10 · Severity: high
Canonical: https://vorant.io/reports/b020a525-59ce-5618-9c7b-e160c4632be6/microsoft-june-2025-security-updates-include-actively-exploited-cve

> Microsoft's June 2025 Patch Tuesday includes CVE-2025-33053, already being exploited in the wild; immediate patching required.

The Japanese CERT-equivalent (IPA) has published a security advisory regarding Microsoft's monthly security update released on June 11, 2025 (Japan time). The update addresses multiple vulnerabilities across Microsoft products that could result in application crashes, denial of service, or complete system compromise by attackers.

Critically, CVE-2025-33053 is confirmed by Microsoft as already being actively exploited in the wild. The IPA strongly recommends immediate application of security updates to all affected systems. While most systems receive updates automatically through Windows Update, organizations managing updates centrally should prioritize rapid deployment of the June 2025 patches. System restarts may be required following patch application.

No specific product names, affected versions, or technical details of CVE-2025-33053 are disclosed in this advisory. Defenders should consult Microsoft's official June 2025 security bulletins for the complete list of affected products and versions, and prioritize this vulnerability in their patch deployment schedule.

## Mentioned in this report

- Vulnerabilities: CVE-2025-33053 (KEV)

Source reporting: https://www.ipa.go.jp/security/security-alert/2025/0611-ms.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/b020a525-59ce-5618-9c7b-e160c4632be6/microsoft-june-2025-security-updates-include-actively-exploited-cve.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup