Microsoft phát hành Patch Tuesday tháng 6/2025, cập nhật ngay!

[WhiteHat Team]

Microsoft đã phát hành bản cập nhật Patch Tuesday hàng tháng, giải quyết tổng cộng 66 lỗ hổng trong bộ sản phẩm của mình. Đợt phát hành này bao gồm các bản vá khắc phục cho một lỗ hổng zero-day hiện đang bị khai thác trong thực tế, cũng như một lỗ hổng khác đã được tiết lộ công khai.

Bản phát hành bảo mật tháng 6/2025 giải quyết các lỗ hổng trên nhiều danh mục:

• 25 lỗ hổng thực thi mã từ xa
• 13 Lỗ hổng nâng cao đặc quyền
• 17 Lỗ hổng tiết lộ thông tin
• 6 lỗ hổng từ chối dịch vụ
• 3 Lỗ hổng bỏ qua tính năng bảo mật
• 2 Lỗ hổng giả mạo

Lỗ hổng Zero-Day đang bị khai thác thực tế:​

• CVE-2025-33053 - WebDAV RCE (Remote Code Execution):

Lỗ hổng nghiêm trọng nhất trong đợt cập nhật tháng 6/2025 của Microsoft là một lỗi thực thi mã từ xa (RCE) nằm trong dịch vụ Web Distributed Authoring and Versioning (WebDAV) của Windows.

• CVE-2025-33073 - SMB Client Elevation of Privilege

Lỗ hổng Leo thang đặc quyền (EoP) ảnh hưởng đến Windows SMB Client (Windows 10, 11, Server…), có điểm CVSS 8,8. Kẻ tấn công có thể khai thác lỗ hổng nếu dụ được nạn nhân hoặc máy nạn nhân kết nối đến máy chủ SMB do kẻ tấn công kiểm soát. Nếu thành công, kẻ tấn công có thể leo thang đặc quyền lên SYSTEM, cấp cao nhất trong hệ thống. Tuy chưa bị khai thác ngoài thực tế nhưng vẫn rất nguy hiểm.

Người dùng được khuyến nghị cần ưu tiên cài đặt các bản cập nhật này, đặc biệt là đối với hai lỗ hổng zero-day trên. Lỗ hổng zero-day của WebDAV (CVE-2025-33053) gây ra rủi ro ngay lập tức cho các tổ chức có hệ thống kết nối internet, trong khi lỗ hổng SMB (CVE-2025-33073) đe dọa đến bảo mật mạng nội bộ.

Danh sách bản vá Microsoft Patch Tuesday tháng 6 năm 2025​

Tag​	CVE ID​	CVE Title​	Severity​
Microsoft Office	CVE-2025-47164	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office	CVE-2025-47167	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office	CVE-2025-47162	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office	CVE-2025-47953	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office SharePoint	CVE-2025-47172	Microsoft SharePoint Server Remote Code Execution Vulnerability	Critical
Windows Cryptographic Services	CVE-2025-29828	Windows Schannel Remote Code Execution Vulnerability	Critical
Windows KDC Proxy Service (KPSSVC)	CVE-2025-33071	Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability	Critical
Windows Netlogon	CVE-2025-33070	Windows Netlogon Elevation of Privilege Vulnerability	Critical
Windows Remote Desktop Services	CVE-2025-32710	Windows Remote Desktop Services Remote Code Execution Vulnerability	Critical
.NET and Visual Studio	CVE-2025-30399	.NET and Visual Studio Remote Code Execution Vulnerability	Important
App Control for Business (WDAC)	CVE-2025-33069	Windows App Control for Business Security Feature Bypass Vulnerability	Important
Microsoft AutoUpdate (MAU)	CVE-2025-47968	Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability	Important
Microsoft Local Security Authority Server (lsasrv)	CVE-2025-33056	Windows Local Security Authority (LSA) Denial of Service Vulnerability	Important
Microsoft Office	CVE-2025-47173	Microsoft Office Remote Code Execution Vulnerability	Important
Microsoft Office Excel	CVE-2025-47165	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office Excel	CVE-2025-47174	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office Outlook	CVE-2025-47171	Microsoft Outlook Remote Code Execution Vulnerability	Important
Microsoft Office Outlook	CVE-2025-47176	Microsoft Outlook Remote Code Execution Vulnerability	Important
Microsoft Office PowerPoint	CVE-2025-47175	Microsoft PowerPoint Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2025-47166	Microsoft SharePoint Server Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2025-47163	Microsoft SharePoint Server Remote Code Execution Vulnerability	Important
Microsoft Office Word	CVE-2025-47170	Microsoft Word Remote Code Execution Vulnerability	Important
Microsoft Office Word	CVE-2025-47957	Microsoft Word Remote Code Execution Vulnerability	Important
Microsoft Office Word	CVE-2025-47169	Microsoft Word Remote Code Execution Vulnerability	Important
Microsoft Office Word	CVE-2025-47168	Microsoft Word Remote Code Execution Vulnerability	Important
Nuance Digital Engagement Platform	CVE-2025-47977	Nuance Digital Engagement Platform Spoofing Vulnerability	Important
Remote Desktop Client	CVE-2025-32715	Remote Desktop Protocol Client Information Disclosure Vulnerability	Important
Visual Studio	CVE-2025-47959	Visual Studio Remote Code Execution Vulnerability	Important
WebDAV	CVE-2025-33053	Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability	Important
Windows Common Log File System Driver	CVE-2025-32713	Windows Common Log File System Driver Elevation of Privilege Vulnerability	Important
Windows DHCP Server	CVE-2025-33050	DHCP Server Service Denial of Service Vulnerability	Important
Windows DHCP Server	CVE-2025-32725	DHCP Server Service Denial of Service Vulnerability	Important
Windows DWM Core Library	CVE-2025-33052	Windows DWM Core Library Information Disclosure Vulnerability	Important
Windows Hello	CVE-2025-47969	Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability	Important
Windows Installer	CVE-2025-33075	Windows Installer Elevation of Privilege Vulnerability	Important
Windows Installer	CVE-2025-32714	Windows Installer Elevation of Privilege Vulnerability	Important
Windows Kernel	CVE-2025-33067	Windows Task Scheduler Elevation of Privilege Vulnerability	Important
Windows Local Security Authority (LSA)	CVE-2025-33057	Windows Local Security Authority (LSA) Denial of Service Vulnerability	Important
Windows Local Security Authority Subsystem Service (LSASS)	CVE-2025-32724	Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability	Important
Windows Media	CVE-2025-32716	Windows Media Elevation of Privilege Vulnerability	Important
Windows Recovery Driver	CVE-2025-32721	Windows Recovery Driver Elevation of Privilege Vulnerability	Important
Windows Remote Access Connection Manager	CVE-2025-47955	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-33064	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-33066	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows SDK	CVE-2025-47962	Windows SDK Elevation of Privilege Vulnerability	Important
Windows Secure Boot	CVE-2025-3052	Cert CC: CVE-2025-3052 InsydeH2O Secure Secure Boot Bypass	Important
Windows Security App	CVE-2025-47956	Windows Security App Spoofing Vulnerability	Important
Windows Shell	CVE-2025-47160	Windows Shortcut Files Security Feature Bypass Vulnerability	Important
Windows SMB	CVE-2025-33073	Windows SMB Client Elevation of Privilege Vulnerability	Important
Windows SMB	CVE-2025-32718	Windows SMB Client Elevation of Privilege Vulnerability	Important
Windows Standards-Based Storage Management Service	CVE-2025-33068	Windows Standards-Based Storage Management Service Denial of Service Vulnerability	Important
Windows Storage Management Provider	CVE-2025-24065	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-24068	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-24069	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-32719	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-32720	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33055	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33058	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33059	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33060	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33061	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33062	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33063	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Management Provider	CVE-2025-33065	Windows Storage Management Provider Information Disclosure Vulnerability	Important
Windows Storage Port Driver	CVE-2025-32722	Windows Storage Port Driver Information Disclosure Vulnerability	Important
Windows Win32K – GRFX	CVE-2025-32712	Win32k Elevation of Privilege Vulnerability	Important

Theo Cyber Security News​