Microsoft Patch Tuesday, July 2025 Edition

Microsoft released security updates addressing at least 137 vulnerabilities across Windows, Office, SQL Server and related components, including 14 critical flaws. Notable fixes cover a CVSS 9.8 pre-auth remote code execution (CVE-2025-47981), an information-disclosure vulnerability in SQL Server with public proof-of-concept code (CVE-2025-49719), multiple Office RCEs that can be triggered without user interaction, and a Configuration Manager RCE that enables arbitrary SQL as a privileged service account; Adobe also issued updates for several products.