June 2025 Patch Tuesday Analysis

Today’s Patch Tuesday Alert addresses Microsoft’s June 2025 Security Updates. We are actively working on coverage for these vulnerabilities and expect to ship ASPL-1160 as soon as coverage is completed.

In-The-Wild & Disclosed CVEs

CVE-2025-33053

A WebDAV code execution vulnerability, CVE-2025-33053 requires that a user open a malicious .URL file for compromise to occur. CheckPoint has released a detailed blog post regarding this vulnerability. This is one of the vulnerabilities where Microsoft has released an IE cumulative update for older versions of Windows that must be installed alongside the Security Only update that users are likely more accustomed to installing. Microsoft has reported this vulnerability as Exploitation Detected.

CVE-2025-33073

An SMB Client vulnerability, CVE-2025-33073 has been publicly disclosed but has not seen active exploitation. In fact, Microsoft has indicated in the exploitability assessment that this vulnerability is less likely to see exploitation. Ultimately, this is a privilege escalation that could see an attacker gain SYSTEM privileges, however it requires that a victim machine (the SMB client) connect back to a malicious server and authenticate. Only once this has happened can privilege escalation occur. Microsoft has reported this vulnerability as Exploitation Less Likely.

CVE Breakdown by Tag

While historical Microsoft Security Bulletin groupings are gone, Microsoft vulnerabilities are tagged with an identifier. This list provides a breakdown of the CVEs on a per tag basis. Vulnerabilities are also color coded to aid with identifying key issues.

• Traditional Software
• Mobile Software
• Cloud or Cloud Adjacent
• Vulnerabilities that are being exploited or that have been disclosed will be highlighted

Other Information

At the time of publication, there were no new advisories included with the June Security Guidance.