Microsoft’s June 2025 Patch Tuesday Fixes Active Zero-Day Exploits

Microsoft’s June 2025 Patch Tuesday addresses 68 vulnerabilities, including one actively exploited zero-day (CVE-2025-33053) in WebDAV and a publicly disclosed flaw (CVE-2025-33073). Critical issues span Windows, Office, SharePoint, and M365 Copilot, including CVE-2025-32711, a zero-click data exfiltration flaw in Copilot. Several Office RCEs are exploitable via the Preview Pane, while other high-impact bugs affect Schannel, SMB, and privilege escalation paths. Users are urged to apply patches immediately to mitigate active threats and enhance system security.