Microsoft · ServicingStack update · August 12, 2025

KB5063899: August 2025 cumulative update for Windows Server 23H2

KB5063899, released August 12, 2025, fixes 57 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1791). None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product

CVEs closed

4 rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.5162

98th percentile

Priority of the 57 CVEs

Patch now 0
                                Urgent 10
                                High 35
                                Routine 12

Applies to

Product	Build after install
Windows Server 2022, 23H2 Edition (Server Core installation)	25398.1791

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2025-53778	Windows NTLM	Elevation of Privilege	8.8	0.5162	More likely
Urgent	CVE-2025-53766	Windows GDI+	Remote Code Execution	9.8	0.0846	Exploitation Less Likely
Urgent	CVE-2025-50177	Windows Message Queuing	Remote Code Execution	8.1	0.0461	More likely
Urgent	CVE-2025-50168	Windows Win32K - ICOMP	Elevation of Privilege	7.8	0.0077	More likely
Urgent	CVE-2025-53156	Storage Port Driver	Information Disclosure	5.5	0.0071	More likely
Urgent	CVE-2025-50176	Graphics Kernel	Remote Code Execution	7.8	0.0054	Exploitation Less Likely
Urgent	CVE-2025-49743	Microsoft Graphics Component	Elevation of Privilege	6.7	0.0053	More likely
Urgent	CVE-2025-53132	Windows Win32K - GRFX	Elevation of Privilege	7.8	0.0046	More likely
Urgent	CVE-2025-53147	Windows Ancillary Function Driver for WinSock	Elevation of Privilege	7.0	0.0045	More likely
Urgent	CVE-2025-50167	Role: Windows Hyper-V	Elevation of Privilege	7.0	0.0038	More likely
High	CVE-2025-53722	Windows Remote Desktop Services	Denial of Service	7.5	0.2342	Exploitation Less Likely
High	CVE-2025-53143	Windows Message Queuing	Remote Code Execution	8.8	0.0903	Exploitation Less Likely
High	CVE-2025-53144	Windows Message Queuing	Remote Code Execution	8.8	0.0849	Exploitation Less Likely
High	CVE-2025-53145	Windows Message Queuing	Remote Code Execution	8.8	0.0849	Exploitation Less Likely
High	CVE-2025-50171	Remote Desktop Server	Spoofing	9.1	0.0104	Exploitation Less Likely
High	CVE-2025-53720	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0098	Exploitation Unlikely
High	CVE-2025-50163	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.8	0.0097	Exploitation Unlikely
High	CVE-2025-53131	Windows Media	Remote Code Execution	8.8	0.0097	Exploitation Less Likely
High	CVE-2025-50160	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0093	Exploitation Less Likely
High	CVE-2025-50162	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0093	Exploitation Unlikely
High	CVE-2025-50164	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0093	Exploitation Unlikely
High	CVE-2025-53149	Kernel Streaming WOW Thunk Service Driver	Elevation of Privilege	7.8	0.0077	Exploitation Less Likely
High	CVE-2025-50161	Windows Win32K - GRFX	Elevation of Privilege	7.3	0.0060	Exploitation Less Likely
High	CVE-2025-50159	Remote Access Point-to-Point Protocol (PPP) EAP-TLS	Elevation of Privilege	7.3	0.0059	Exploitation Less Likely
High	CVE-2025-50173	Windows Installer	Elevation of Privilege	7.8	0.0055	Exploitation Less Likely

Released the same day

KB5002765
Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)
KB5002769
Microsoft SharePoint Server 2019
KB5002771
Microsoft SharePoint Enterprise Server 2016
KB5002773
Microsoft SharePoint Server Subscription Edition
KB5047155
Microsoft Exchange Server Subscription Edition RTM
KB5050672
Microsoft Exchange Server 2019 Cumulative Update 15
KB5050673
Microsoft Exchange Server 2019 Cumulative Update 14
KB5050674
Microsoft Exchange Server 2016 Cumulative Update 23
KB5059086
Microsoft Dynamics 365 (on-premises) version 9.1
KB5063221
Microsoft Exchange Server 2019 Cumulative Update 15
KB5063222
Microsoft Exchange Server 2019 Cumulative Update 14
KB5063223
Microsoft Exchange Server 2016 Cumulative Update 23

Vendor advisory

https://support.microsoft.com/help/5063899

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5063899">KB5063899 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.