Patch Tuesday Archives

Winsage

August 18, 2025

Windows 11 24H2 Security Update Causes SSD/HDD Failures and Potential Data Corruption

A significant security update from Microsoft, Windows 11 24H2 (KB5063878), is causing issues for users, making SSDs and HDDs inaccessible and potentially corrupting user data. Users have reported installation failures with error code 0x80240069, and despite a hotfix, the update has led to storage drives disappearing from the Windows environment, particularly during large sequential write operations. Recovery attempts are often unsuccessful, putting user files at risk. Microsoft has not provided an official fix, and users are advised to avoid the update and ensure routine data backups. Unplugging and reconnecting the affected drive may temporarily restore visibility but does not guarantee data safety.

Winsage

August 15, 2025

Microsoft Confirms Emergency Windows Update For PC Users

Microsoft has acknowledged issues with the August security update for Windows 11, which may fail to install for some users, particularly affecting enterprise users. The error code associated with this issue is 0x80240069, and Microsoft has released an emergency update that will be automatically delivered through Windows Update. Administrators can also manually download the 'KB5063878 250814_00551 Known Issue Rollback' policy. Microsoft is testing another patch to address the installation failure and is committed to providing a resolution in a future update.

Winsage

August 15, 2025

For August, a ‘complex’ Patch Tuesday with 111 updates

Microsoft Exchange Server received five critical patches classified as important, necessitating immediate attention from IT professionals due to the active exploitation of CVE-2025-53786, which threatens hybrid Exchange environments, especially in government settings. Microsoft also released two updates for vulnerabilities CVE-2025-53772 and CVE-2025-53773 affecting Visual Studio and Microsoft’s Web Deploy tools. There were no new releases from Microsoft for Adobe products, and the only third-party updates noted were for Chromium.

Winsage

August 15, 2025

Microsoft Issues Emergency Windows Fix For Frustrating Installation Woes

Microsoft has acknowledged installation issues with certain security updates following Patch Tuesday, specifically for organizations using Windows Server Update Services (WSUS). A temporary remedy has been issued for these organizations, while individual home users are unaffected. IT administrators can download a Group Policy for the known issue rollback or manually install the update package. Additionally, Microsoft has identified an Event Viewer error related to August updates, which does not affect Windows performance. The issues were first reported by Windows Latest, and Microsoft plans to resolve them in future updates.

Winsage

August 15, 2025

Microsoft patches more than 100 Windows security flaws – update your PC now

Microsoft's August Patch Tuesday update addresses 107 vulnerabilities in Windows, including 13 critical ones. It affects all current versions of Windows, including Windows 10, Windows 11, and Windows Server. The update fixes security issues in components like File Explorer, Remote Desktop, and Hyper-V, as well as bugs in Microsoft Office, Edge, and Teams. Nine critical vulnerabilities involve remote code execution. One vulnerability, CVE-2025-53779, is a zero-day flaw in the Windows Kerberos authentication system that could grant domain administrator privileges if exploited. The update also introduces new features, including a revamped error screen called the Black Screen of Death and Quick Machine Recovery for troubleshooting boot failures. Users can check for the update in the Windows Update section of Settings.

Winsage

August 14, 2025

Microsoft patch Tuesday update fails to install

Microsoft has acknowledged an issue with its August Patch Tuesday update affecting installations via Windows Server Update Services (WSUS), specifically that the "August 12, 2025 Windows security update for Windows 11, version 24H2, might fail to install with error code 0x80240069 when installed via WSUS." This error complicates update management for organizations using WSUS. Microsoft is working on a resolution for this issue, which will be included in a future Windows update. Administrators can manually install the patch or use a provided group policy as a workaround. There is currently no timeline for when the installation issue will be resolved.

Winsage

August 14, 2025

Microsoft confirms CertificateServicesClient error in Windows 11 24H2, but you can ignore it

Users of Windows 11 24H2 may encounter an error message related to the CertificateServicesClient following the installation of the July 2025 non-security preview update and subsequent updates, including the August 2025 security patch. Microsoft has acknowledged that users might see an entry in the Event Viewer logs with Error ID 57, stating: “The ‘Microsoft Pluton Cryptographic Provider’ provider was not loaded because initialization failed.” This error does not affect active applications and is considered a false positive. Microsoft recognized this bug on August 11, but it could not be addressed before the mandatory Patch Tuesday update on August 12, leading to a broader impact on devices. Additionally, users have reported a separate issue causing a Blue Screen of Death (BSOD) in VR gaming after repeated update reinstalls. Another issue involved the SgrmBroker service, which failed to start and generated unnecessary logs, but does not disrupt other system functions. The August 2025 Update has also introduced installation errors.

Winsage

August 14, 2025

Microsoft fixed 100+ security flaws in Windows and Office this month

Microsoft has addressed 67 vulnerabilities in its supported Windows versions, including Windows 10, Windows 11, and Windows Server. Users on Windows 7 and Windows 8.1 have not received updates for some time. Upgrading to Windows 11 24H2 is recommended for continued protection. Two critical remote code execution (RCE) vulnerabilities are CVE-2025-53766, affecting the Graphics Device Interface API, and CVE-2025-50165, impacting the Windows Graphics Component. Both can be exploited by visiting a specially crafted website. Three critical vulnerabilities in Hyper-V include CVE-2025-48807, which allows code execution from a guest system to the host; CVE-2025-53781, which poses a data leak risk; and CVE-2025-49707, a spoofing vulnerability. Additionally, 12 vulnerabilities in the Routing and Remote Access Service (RRAS) have been addressed, with half classified as RCE vulnerabilities and the other half as data leaks. CVE-2025-53779, affecting Kerberos for Windows Server 2025, could allow an attacker to gain administrator rights under specific conditions, but is classified as medium risk.

Winsage

August 13, 2025

Microsoft’s Patch Tuesday gives sys admins a baker’s dozen

Microsoft's August Patch Tuesday addressed 111 vulnerabilities, including 12 classified as critical. A known elevation of privilege flaw in the Windows Kerberos protocol, CVE-2025-53779, has a CVSS score of 7.2 and requires authenticated access for exploitation. Two critical remote code execution (RCE) vulnerabilities, CVE-2025-50165 and CVE-2025-53766, both rated 9.8, were identified in the Windows Graphics Device Interface. SharePoint has a critical RCE bug, CVE-2025-49712, with a severity score of 8.8. Other critical flaws include vulnerabilities in Microsoft Message Queuing, Office, Hyper-V, and Azure Stack Hub. Adobe released fixes for 68 CVEs, including eight critical RCE bugs in InCopy and critical issues in other products like Commerce, InDesign, and Substance 3D applications. SAP issued 15 security notes, including three critical vulnerabilities rated at 9.9 related to code injection in SAP S/4HANA. Intel released 34 advisories addressing 66 vulnerabilities, including high-severity issues in Xeon 6 processors and Intel Ethernet Drivers. Google updated Android to fix several flaws, including two actively exploited Qualcomm vulnerabilities.

Winsage

August 13, 2025

Microsoft Teams RCE Vulnerability Let Attackers Read, Write and Delete Messages

Microsoft has identified a critical remote code execution (RCE) vulnerability in its Teams software, designated as CVE-2025-53783, during the August 2025 Patch Tuesday updates. This heap-based buffer overflow vulnerability allows unauthorized attackers to manipulate user messages and data through network code execution. It has a CVSS 3.1 score of 7.5, categorized as “Important.” Exploitation requires user interaction, such as clicking a malicious link or opening a specially crafted file. Microsoft has issued a fix and recommends users implement the latest security updates. There have been no public disclosures or active exploitation of this vulnerability, and its likelihood of exploitation is assessed as “Less Likely.” The vulnerability is part of a broader update addressing 107 flaws, including a zero-day vulnerability in Windows Kerberos. Security experts advise organizations using Microsoft Teams to prioritize the August 2025 security updates due to the serious risk of data compromise.