Microsoft's latest major patch fixes a serious zero-day flaw, and a host of other issues - so update now

• August 2025 Patch Tuesday update addresses 111 flaws
• These include multiple critical-severity flaws and a zero-day issue
• Users should apply the patch immediately, or risk attack

Microsoft has released its August 2025 Patch Tuesday package, a cumulative set of updates addressing more than 100 vulnerabilities across a host of its products.

Among them was a known zero-day vulnerability in Windows Kerberos, the company's implementation of the Kerberos authentication protocol, which securely verifies user identities in a Windows network using tickets instead of sending passwords over the network.

Kerberos was found to contain a “relative path traversal” flaw which allows an authorized threat actor to elevate privileges over a network.

Critical severity flaws

Besides the zero-day, Microsoft fixed another ...