I know it's risky, but I'll have to try. 🚨

Microsoft released Security Update (Patch Tuesday) for August 2025 for Windows 11, code KB5063878 and KB5063875, parts of Windows 10, code KB5063709, KB5063877, KB5063871 and KB5063889.

.

In this round, a total of 107 vulnerabilities were fixed, including one publicly exposed Zero-Day vulnerability in Windows Kerberos that could allow an attacker to upgrade to Domain Admin.

.

Of these, there are 13 critical vulnerabilities, divided into 9 Remote Code Execution (RCE) vulnerabilities, 3 Information Disclosure vulnerabilities, 1 Elevation of Privilege vulnerability.

.

A breakdown of the vulnerabilities that have been addressed is as follows:

- Elevation of Privilege vulnerability: 44 items

- Remote Code Execution Vulnerability: 35 items

- Information Disclosure: 18 items

- Denial of Service vulnerability: 4 items

- Identity forgery vulnerability (Spoofing): 9 items

.

These figures do not include vulnerabilities in Mariner, Microsoft Edge and Azure that were previously fixed in the same month.

.

For the Zero-Day vulnerability (CVE-2025-53779) in Windows Kerberos, Microsoft says it's a "Relative path traversal" attack that allows an already eligible attacker to elevate to Domain Admin if the msds-groupMSAMembership and msds-ManagedAccountPrecededByLink attributes are accessed.

.

In addition to Microsoft, there are other software manufacturers that release security updates during the same period, such as 7-Zip, Adobe, Cisco, Fortinet, Google Android, Proton, SAP, Trend Micro, WinRAR.

.

IT teams are recommended to implement updates to Windows systems, SQL Server and Microsoft products ASAP, specifically Zero-Day vulnerabilities and vulnerabilities that can be attacked remotely, as well as to closely monitor updates from other software suppliers to prevent attacks from these vulnerabilities.

.

Source: bleepingcomputer

# Cough to know # Includes IT matters # IT # microsoft # windows 11