Azure Virtual Machines Archives

Winsage

August 12, 2025

Microsoft August 2025 Patch Tuesday fixes one zero-day, 107 flaws

A series of vulnerabilities have been identified across various Microsoft platforms, categorized by severity. Critical Vulnerabilities: - CVE-2025-49707: Azure Virtual Machines Spoofing Vulnerability - CVE-2025-53781: Azure Virtual Machines Information Disclosure Vulnerability - CVE-2025-53793: Azure Stack Hub Information Disclosure Vulnerability - CVE-2025-50176: DirectX Graphics Kernel Remote Code Execution Vulnerability - CVE-2025-50165: Windows Graphics Component Remote Code Execution Vulnerability Important Vulnerabilities: - CVE-2025-53729: Microsoft Azure File Sync Elevation of Privilege Vulnerability - CVE-2025-53152: Desktop Windows Manager Remote Code Execution Vulnerability - CVE-2025-53732: Microsoft Office Remote Code Execution Vulnerability - CVE-2025-53740: Microsoft Office Remote Code Execution Vulnerability - CVE-2025-53738: Microsoft Word Remote Code Execution Vulnerability Windows Operating System Vulnerabilities: - CVE-2025-50170: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability - CVE-2025-53131: Windows Media Remote Code Execution Vulnerability - CVE-2025-50158: Windows NTFS Information Disclosure Vulnerability

Winsage

July 16, 2025

Windows Secure Boot Certificate Expired in June, Microsoft Issues Warning

Microsoft has announced that Secure Boot certificates for Windows devices will begin to expire in June 2026, which may affect device functionality and security. An out-of-band update (KB5064489) was released on July 13, 2025, to address immediate security concerns and prepare systems for the certificate transition. This update includes essential quality improvements and fixes issues related to the startup of certain Azure Virtual Machines when Virtualization-Based Security (VBS) is enabled. The update is cumulative and incorporates previous security fixes. Users are advised to install the update promptly and review guidance for updating their certificates before the expiration deadline.

Winsage

July 16, 2025

Microsoft releases emergency fix for Azure Virtual Machines issue caused by Windows 11 update

Microsoft released the KB5062553 update for Windows, which caused boot failures in some Generation 2 Azure Virtual Machines (VMs) with Trusted Launch disabled. In response, Microsoft issued an emergency patch, KB5064489, applicable to Windows 11 and Windows Server 2025, to address these issues. Affected VMs may experience boot failures if Virtualization-Based Security (VBS) is enforced via registry key. Users are advised to check if their VMs are created as “Standard” and if VBS is enabled. The KB5064489 update is not automatically deployed and must be manually downloaded from the Microsoft Update Catalog, with specific installation methods outlined.