Warning: Microsoft Patch Tuesday July 2025 patches 128 vulnerabilities (12 Critical, 115 Important, 1 Moderate), patch Immediately!

**Executive summary:** Microsoft’s July 2025 Patch Tuesday addresses 128 vulnerabilities across a broad set of products (including 12 critical and many RCEs and elevation-of-privilege issues); notable items include BitLocker bypasses that permit data extraction with physical access, a publicly disclosed SQL Server information disclosure (tracked as a 0-day), multiple remote code execution flaws (Kerberos NEGOEX, KDC Proxy, SharePoint, Office), and enforcement changes to a Kerberos elevation-of-privilege mitigation—Microsoft reports one zero-day but no observed active exploitation and recommends urgent patching and heightened detection/monitoring.