Microsoft Patch Tuesday July 2025: 130 Vulnerabilities Patched, Including 1 Zero-Day and 41 RCE Flaws

Microsoft released its July 2025 Patch Tuesday security updates on July 8, 2025, addressing 130 vulnerabilities across its software ecosystem, including one publicly disclosed zero-day vulnerability and numerous critical security flaws that pose significant risks to organizations worldwide.

The July 2025 security update represents a substantial patch cycle, with 14 vulnerabilities rated as “Critical” – ten of which are remote code execution (RCE) vulnerabilities, one information disclosure flaw, and two AMD side channel attack vulnerabilities. The comprehensive patch distribution includes:

These counts exclude four Mariner and three Microsoft Edge issues that were addressed separately earlier in the month.

Zero-Day Vulnerability in SQL Server

The most significant threat patched this month is CVE-2025-49719, a publicly disclosed zero-day vulnerability in ...