Today is the monthly 'Windows Update' day.



The monthly Windows Update, which delivers security updates and bug fixes for Windows, has been released. The Windows Update on June 11, 2025 fixes 67 vulnerabilities and reports a fatal problem in Microsoft Office.

Security Update Guide - Microsoft Security Response Center
https://msrc.microsoft.com/update-guide/ja-jp/releaseNote/2025-Jun

June 10, 2025—KB5060842 (OS Build 26100.4349) - Microsoft Support
https://support.microsoft.com/ja-jp/topic/june-10-2025-kb5060842-os-build-26100-4349-47ff300b-2a04-440c-9476-2860d04fce8d




◆Windows 11 v24H2, v23H2
Maximum severity:
emergency

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
v24H2 5060842
v24H2 Hotpatch 5060841
v23H2 5060999

◆Windows 10 v22H2
Maximum severity:
emergency

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
5060533

◆Windows Server 2025
Maximum severity:
emergency

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
5060842

◆Windows Server 2022, 23H2
Maximum severity:
emergency

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
Windows Server 2022, 5060526
Windows Server 23H2, 5060525

◆Windows Server 2019, 2016
Maximum severity:
emergency

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
Windows Server 2019, 5060531
Windows Server 2016, 5061010

◆Remote Desktop client for Windows Desktop
Maximum severity:
important

The biggest impacts:
Information leakage

Related knowledge base articles or support web pages:
https://learn.microsoft.com/previous-versions/remote-desktop-client/

◆Microsoft Office
Maximum severity:
emergency

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
https://learn.microsoft.com/officeupdates

◆Microsoft SharePoint
Maximum severity:
emergency

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
https://learn.microsoft.com/officeupdates/sharepoint-updates

◆Microsoft .NET
Maximum severity:
important

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
https://learn.microsoft.com/dotnet

◆Microsoft Visual Studio
Maximum severity:
important

The biggest impacts:
Remote code execution possible

Related knowledge base articles or support web pages:
https://learn.microsoft.com/visualstudio

◆Microsoft Azure
Maximum severity:
important

The biggest impacts:
Impersonation

Related knowledge base articles or support web pages:
https://learn.microsoft.com/azure

There are no updates to existing vulnerability information or new security advisories in the June 2025 Windows Update. There is one update to an existing security advisory to inform you that a new version of the servicing stack update is available.

In the June 2025 security update, 67 'Microsoft CVEs' were published. 'CVE' is a vulnerability identifier and indicates the content that has been fixed this time. Of these, 10 are vulnerabilities that are at risk of exploitation. In particular, the ' Web Distributed Access and Versioning (WebDAV) Remote Code Execution Vulnerability ' is a vulnerability that has been 'confirmed to be exploited.'

Other improvements include the fact that system restore points are now retained for up to 60 days after installing the June 2025 Windows security update. In addition, the issue of Windows Hello, which uses face or fingerprint authentication to sign in or unlock Windows, preventing users from signing in with a self-signed certificate when using Windows Hello for Business in the key trust model has been resolved.

Windows Update is released on the second Tuesday of every month in the United States, and the next update is scheduled to be provided on Wednesday, July 9, 2025, Japan time.

in Software,   Security, Posted by log1e_dh