Microsoft July 2025 Patch Tuesday: Critical Fixes for Windows, SQL Server & More

Microsoft's July 2025 Patch Tuesday release is a substantial update, addressing 133 vulnerabilities across its product suite. This comprehensive patch includes fixes for Windows, Microsoft Office, SQL Server, and Visual Studio, underscoring the critical need for organizations to implement these updates promptly to maintain system security and integrity.
Zero-Day Vulnerability in SQL Server
A significant highlight of this release is the remediation of a zero-day vulnerability in Microsoft SQL Server, identified as CVE-2025-49719. This flaw, with a CVSS score of 7.5, is an information disclosure issue stemming from improper input validation. It allows unauthenticated attackers to access uninitialized memory over the network, potentially exposing sensitive data such as credentials and connection strings. Although no active exploitation has been reported, the public disclosure of this vulnerability elevates the risk of future attacks. Microsoft advises users to update their SQL Server instances to the latest versions and ensure that applications utilizing SQL Server are compatible with Microsoft OLE DB Driver versions 18 or 19. (securityweek.com)
Critical Remote Code Execution Vulnerabilities
Among the 14 critical vulnerabilities addressed, several stand out due to their potential impact:

• SPNEGO Extended Negotiation (NEGOEX) Vulnerability (CVE-2025-47981): This remote code execution flaw, with a CVSS score of 9.8, affects the SPNEGO protocol used in authentication processes. Exploitation could allow unauthenticated attackers to execute arbitrary code over the network, posing a significant threat to systems. (helpnetsecurity.com)
• Microsoft SharePoint Vulnerabilities (CVE-2025-49701 and CVE-2025-49704): These critical vulnerabilities, each with a CVSS score of 8.8, could enable remote code execution through authenticated access over the internet. Given SharePoint's widespread use in enterprise environments, timely patching is essential. (socradar.io)
• Windows KDC Proxy Service Vulnerability (CVE-2025-49735): This use-after-free vulnerability, with a CVSS score of 8.1, could allow unauthenticated remote code execution, potentially leading to full system compromise. (thehackernews.com)

Breakdown of Vulnerabilities
The July 2025 Patch Tuesday addresses a diverse array of vulnerabilities:

• Elevation of Privilege: 53 vulnerabilities
• Remote Code Execution: 42 vulnerabilities
• Information Disclosure: 18 vulnerabilities
• Security Feature Bypass: 8 vulnerabilities
• Denial of Service: 6 vulnerabilities
• Spoofing: 4 vulnerabilities
• Tampering: 1 vulnerability

This distribution highlights the multifaceted nature of security threats and the importance of a comprehensive patching strategy. (socradar.io)
Recommendations for IT Administrators
Given the breadth and severity of the vulnerabilities addressed, IT administrators should prioritize the following actions:

• Immediate Deployment of Patches: Apply the July 2025 security updates across all affected systems to mitigate potential threats.
• Update SQL Server and Associated Drivers: Ensure that SQL Server instances are updated to the latest versions and that applications are compatible with Microsoft OLE DB Driver versions 18 or 19.
• Review and Update Security Configurations: Assess and adjust security settings, especially concerning authentication protocols like SPNEGO, to enhance system defenses.
• Monitor for Unusual Activity: Implement monitoring tools to detect and respond to potential exploitation attempts promptly.

By adhering to these recommendations, organizations can bolster their security posture and protect against the vulnerabilities addressed in this comprehensive update.

---

Source: Computerworld For July, a ‘big, broad’ Patch Tuesday release