Back to today’s briefing

Story perspectives

Microsoft Fixes 67 Vulnerabilities, Targets Critical WebDAV Flaw

6/12/2025

40 7

Summary

Microsoft Security Update

In June 2025, Microsoft tackled 67 vulnerabilities in its Patch Tuesday update, notably fixing CVE-2025-33053, a severe flaw in WebDAV exploited by the Stealth Falcon group for espionage. This critical vulnerability enables attackers to deploy malware without any user action. The update also addressed significant flaws in Office and Windows, underscoring the urgent need for timely security updates.

Summary

WebDAV Vulnerability Emerges

A critical vulnerability, CVE-2025-33053, has emerged in WebDAV, boasting a staggering 8.8 score on the CVSS scale. This flaw enables attackers to alter file names and paths, executing arbitrary code without needing authentication. With its primary impact on internet-facing WebDAV servers, the threat of remote attacks looms large.

1 of 2

Microsoft Security Update

In June 2025, Microsoft tackled 67 vulnerabilities in its Patch Tuesday update, notably fixing CVE-2025-33053, a severe flaw in WebDAV exploited by the Stealth Falcon group for espionage. This critical vulnerability enables attackers to deploy malware without any user action. The update also addressed significant flaws in Office and Windows, underscoring the urgent need for timely security updates.

1 / 2