Microsoft enjoys first Patch Tuesday of 2025 with no active exploits

Microsoft's July Patch Tuesday delivers 130 fixes including ten critical issues (notably CVE-2025-47981, a CVSS 9.8 SPNEGO RCE), multiple Office RCEs, SQL Server and BitLocker fixes, and AMD firmware updates; Adobe and SAP also released high-severity patches (Adobe ColdFusion, Experience Manager Forms; SAP S/4HANA and SRM issues with CVSS up to 10). The bulletin emphasizes prioritizing these updates—particularly for remote code execution and high-CVSS flaws—and notes only one previously exploited Chromium flaw was disclosed earlier, with no newly reported in-the-wild exploitation for this bundle.