Microsoft · Security update · August 12, 2025

KB5063927: August 2025 security update

KB5063927, released August 12, 2025, fixes 38 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product

CVEs closed

3 rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.5162

98th percentile

Priority of the 38 CVEs

Patch now 0
                                Urgent 6
                                High 23
                                Routine 9

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2025-53778	Windows NTLM	Elevation of Privilege	8.8	0.5162	More likely
Urgent	CVE-2025-53766	Windows GDI+	Remote Code Execution	9.8	0.0846	Exploitation Less Likely
Urgent	CVE-2025-50177	Windows Message Queuing	Remote Code Execution	8.1	0.0461	More likely
Urgent	CVE-2025-49743	Microsoft Graphics Component	Elevation of Privilege	6.7	0.0053	More likely
Urgent	CVE-2025-53132	Windows Win32K - GRFX	Elevation of Privilege	7.8	0.0046	More likely
Urgent	CVE-2025-53147	Windows Ancillary Function Driver for WinSock	Elevation of Privilege	7.0	0.0045	More likely
High	CVE-2025-53722	Windows Remote Desktop Services	Denial of Service	7.5	0.2342	Exploitation Less Likely
High	CVE-2025-53143	Windows Message Queuing	Remote Code Execution	8.8	0.0903	Exploitation Less Likely
High	CVE-2025-53144	Windows Message Queuing	Remote Code Execution	8.8	0.0849	Exploitation Less Likely
High	CVE-2025-53145	Windows Message Queuing	Remote Code Execution	8.8	0.0849	Exploitation Less Likely
High	CVE-2025-53720	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0098	Exploitation Unlikely
High	CVE-2025-50163	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.8	0.0097	Exploitation Unlikely
High	CVE-2025-50160	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0093	Exploitation Less Likely
High	CVE-2025-50162	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0093	Exploitation Unlikely
High	CVE-2025-50164	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.0	0.0093	Exploitation Unlikely
High	CVE-2025-53149	Kernel Streaming WOW Thunk Service Driver	Elevation of Privilege	7.8	0.0077	Exploitation Less Likely
High	CVE-2025-50161	Windows Win32K - GRFX	Elevation of Privilege	7.3	0.0060	Exploitation Less Likely
High	CVE-2025-50173	Windows Installer	Elevation of Privilege	7.8	0.0055	Exploitation Less Likely
High	CVE-2025-53152	Desktop Windows Manager	Remote Code Execution	7.8	0.0045	Exploitation Less Likely
High	CVE-2025-49761	Windows Kernel	Elevation of Privilege	7.8	0.0044	Exploitation Unlikely
High	CVE-2025-50153	Desktop Windows Manager	Elevation of Privilege	7.8	0.0044	Exploitation Less Likely
High	CVE-2025-53141	Windows Ancillary Function Driver for WinSock	Elevation of Privilege	7.8	0.0044	Exploitation Less Likely
High	CVE-2025-53154	Windows Ancillary Function Driver for WinSock	Elevation of Privilege	7.8	0.0044	Exploitation Less Likely
High	CVE-2025-53137	Windows Ancillary Function Driver for WinSock	Elevation of Privilege	7.0	0.0039	Exploitation Less Likely
High	CVE-2025-50158	Windows NTFS	Information Disclosure	7.0	0.0039	Exploitation Less Likely

Released the same day

KB5002765
Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)
KB5002769
Microsoft SharePoint Server 2019
KB5002771
Microsoft SharePoint Enterprise Server 2016
KB5002773
Microsoft SharePoint Server Subscription Edition
KB5047155
Microsoft Exchange Server Subscription Edition RTM
KB5050672
Microsoft Exchange Server 2019 Cumulative Update 15
KB5050673
Microsoft Exchange Server 2019 Cumulative Update 14
KB5050674
Microsoft Exchange Server 2016 Cumulative Update 23
KB5059086
Microsoft Dynamics 365 (on-premises) version 9.1
KB5063221
Microsoft Exchange Server 2019 Cumulative Update 15
KB5063222
Microsoft Exchange Server 2019 Cumulative Update 14
KB5063223
Microsoft Exchange Server 2016 Cumulative Update 23

Vendor advisory

https://support.microsoft.com/help/5063927

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5063927">KB5063927 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.