Application Management and Patching
June and July 2025 Third-Party Patches
Published on: August 18, 2025
June and July tracked closely with May’s metrics. Versions released and vulnerable applications ticked up slightly. Total vulnerabilities ranged from 107 to 111 across May–July.
Notable Vulnerabilities in June and July 2025 Third-Party Patches
Below are June–July vulnerabilities with known exploits, followed by other high-risk items. Microsoft Office: CVE-2025-47165, -47957, -47175, -47171 — all exploited in the wild. CVSS ranges 6.7–8.4.
More information about the vulnerabilities can be found on Microsoft Security Response Center advisories:
If Office isn’t patched yet, prioritize these updates now.
Chromium-based browsers: CVE-2025-6558, -6554, -5419, and -4664 were zero-days. CVSS spans 4.3–8.8.
More information about the vulnerabilities can be found:
Another notable vulnerability CVE-2025-27210 is for Node.js affecting Windows environments. The vulnerability affects Windows users of path.join API. This vulnerability is highlighted because an exploit exists for it. More information about the vulnerability can be found on the vendor’s security release post.
Go (golang.org/x/crypto/ssh) — CVE-2024-45337. EPSS 0.385; CVSS 9.1 (Critical). Impacts the SSH package. More information about this can be found on Golang announcement.
Apache Tomcat — CVE-2024-56337 (race condition). CVSS 9.8; EPSS 0.15. Update to the fixed release and see their official post for more information.
Browser Security Updates in June and July 2025
Major browsers including Google Chrome, Microsoft Edge, Brave, Mozilla Firefox (including ESR versions), Opera One, Vivaldi, and Waterfox received numerous security updates addressing various vulnerabilities.
| Browser | Vulnerabilities | Updates |
| Google Chrome | 16 | 8 |
| Microsoft Edge | 20 | 8 |
| Brave Browser | 7 | 2 |
| Pale Moon | 2 | 1 |
| Mozilla Firefox | 30 | 3 |
| Mozilla Firefox ESR 115 | 6 | 2 |
| Mozilla Firefox ESR 128 | 13 | 2 |
| Mozilla Firefox ESR 140 | 23 | 2 |
| Opera One | 12 | 3 |
| Vivaldi | 3 | 3 |
| Waterfox | 8 | 2 |
Microsoft Product Updates Included in June and July 2025 Third-Party Patches
In addition to Edge, Microsoft issued security updates for several other products.
- Microsoft .NET Runtime 9.0
- Microsoft ASP.NET Core Runtime 9.0
- Microsoft .NET SDK 9.0
- Microsoft 365 Apps
- Microsoft Azure CLI
- Microsoft Edge Beta
- Microsoft .NET Runtime 8.0
- Microsoft .NET SDK 8.0
- Microsoft Windows Desktop Runtime 8.0
- Microsoft ASP.NET Core Runtime Hosting Bundle 8.0
- Microsoft Windows Desktop Runtime 9.0
- Microsoft ASP.NET Core Runtime 8.0
- Microsoft ASP.NET Core Runtime Hosting Bundle 9.0
- Microsoft Remote Desktop
- Microsoft Visual Studio 2022 Enterprise
- Microsoft Visual Studio 2022 Professional
- Microsoft Visio
- Microsoft Project
- Microsoft Visual Studio Team Explorer 2017
- Microsoft Visual Studio Team Explorer 2019
- Microsoft Visual Studio 2019 Enterprise
- Microsoft Visual Studio 2017 Professional
- Microsoft Visual Studio 2022 Community
- Microsoft Visual Studio 2019 Community
- Microsoft Visual Studio 2017 Enterprise
- Microsoft Visual Studio 2019 Professional
- Microsoft Visual Studio Feedback Client 2017
- Microsoft Visual Studio 2017 Community
- Microsoft Visual Studio Team Explorer 2022
- Microsoft Azure Kubelogin
Detailed List of June and July 2025 Third-Party Patches
For a complete list of applications, versions, and the number of remediated vulnerabilities, see the table below generated using Application Workspace data.
| ProductName | VersionName | Vulnerabilities remediated |
| Adobe Acrobat DC | 25.001.20531 | 10 |
| Adobe Acrobat DC | 25.001.20529 | 10 |
| Adobe Acrobat DC Pro and Standard 2020 Classic Track | 20.005.30774 | 10 |
| Adobe Acrobat Reader 2020 MUI – Classic Track | 20.005.30774 | 10 |
| Adobe Acrobat Reader DC | 25.001.20531 | 10 |
| Adobe Acrobat Reader DC – Multilingual (MUI) | 25.001.20531 | 10 |
| Adobe Reader DC | 25.001.20529 | 10 |
| Amazon Corretto JDK 11 | 11.0.28.6.1 | 5 |
| Amazon Corretto JDK 17 | 17.0.16.8.1 | 4 |
| Amazon Corretto JDK 21 | 21.0.8.9.1 | 4 |
| Amazon Corretto JDK 24 | 24.0.2.12.1 | 4 |
| Amazon Corretto JDK 8 | 8.462.08.1 | 4 |
| Amazon Corretto JRE 8 | 8.462.08.1 | 4 |
| Apache Tomcat 10 | 10.1.42 | 4 |
| Apache Tomcat 10 | 10.1.43 | 2 |
| Apache Tomcat 11 | 11.0.8 | 4 |
| Apache Tomcat 11 | 11.0.9 | 2 |
| Apache Tomcat 9 | 9.0.106 | 1 |
| Apache Tomcat 9 | 9.0.107 | 3 |
| Autodesk Revit 2024 | 2024.3.3 | 3 |
| Autodesk Revit 2025 | 2025.4.2 | 3 |
| Beats Winlogbeat | 9.0.3 | 2 |
| Beats Winlogbeat | 7.17.29 | 2 |
| Beats Winlogbeat | 8.18.3 | 2 |
| Brave Browser | 1.80.124 | 2 |
| Brave Browser | 1.80.122 | 3 |
| Brave Browser | 1.80.125 | 1 |
| Brave Browser | 1.79.126 | 2 |
| Brave Browser | 1.79.119 | 2 |
| Brave Browser | 1.79.123 | 2 |
| Brave Browser | 1.80.115 | 1 |
| Brave Browser | 1.80.113 | 3 |
| Burp Suite Community Edition | 2025.5.2 | 8 |
| Burp Suite Community Edition | 2025.6 | 2 |
| Burp Suite Community Edition | 2025.6.3 | 3 |
| Burp Suite Professional Edition | 2025.5.2 | 8 |
| Burp Suite Professional Edition | 2025.6 | 2 |
| Burp Suite Professional Edition | 2025.6.3 | 3 |
| ClamAV | 1.4.3 | 2 |
| DBeaver Community | 25.1.0 | 1 |
| DBeaver Enterprise | 25.1.0 | 1 |
| DBeaver Lite | 25.1.0 | 1 |
| DBeaver Ultimate | 25.1.0 | 1 |
| Docker Desktop | 4.43.0 | 1 |
| Docker Desktop | 4.43.0.198134 | 1 |
| draw.io Desktop | 28.0.6 | 1 |
| Electron | 35.5.1 | 1 |
| Electron | 36.4.0 | 1 |
| Electron | 34.5.8 | 1 |
| Element | 1.11.103 | 1 |
| EnterpriseDB Corporation PostgreSQL 13 | 13.21.2 | 1 |
| EnterpriseDB Corporation PostgreSQL 14 | 14.18.2 | 1 |
| EnterpriseDB Corporation PostgreSQL 15 | 15.13.2 | 1 |
| EnterpriseDB Corporation PostgreSQL 15 | 15.13.3 | 1 |
| EnterpriseDB Corporation PostgreSQL 16 | 16.9.2 | 1 |
| EnterpriseDB Corporation PostgreSQL 16 | 16.9.3 | 1 |
| EnterpriseDB Corporation PostgreSQL 17 | 17.5.2 | 1 |
| EnterpriseDB Corporation PostgreSQL 17 | 17.5.3 | 1 |
| ESET Endpoint Security V11 | 11.1.2062.0 | 3 |
| ESET Endpoint Security V12 | 12.0.2058.0 | 2 |
| ESET Server Security 12 | 12.0.12005.0 | 2 |
| Git | 2.50.1.1 | 9 |
| Google Chrome for Business | 138.0.7204.169 | 2 |
| Google Chrome for Business | 138.0.7204.184 | 1 |
| Google Chrome for Business | 137.0.7151.120 | 2 |
| Google Chrome for Business | 138.0.7204.50 | 3 |
| Google Chrome for Business | 137.0.7151.69 | 2 |
| Google Chrome for Business | 137.0.7151.104 | 2 |
| Google Chrome for Business | 138.0.7204.158 | 3 |
| Google Chrome for Business | 138.0.7204.97 | 1 |
| Google Go Programming Language 1.23 | 1.23.10 | 3 |
| Google Go Programming Language 1.23 | 1.23.11 | 1 |
| Google Go Programming Language 1.24 | 1.24.4 | 3 |
| Google Go Programming Language 1.24 | 1.24.5 | 1 |
| Helm | 3.18.4 | 1 |
| IBM Semeru Runtime Open Edition JDK 11 (LTS) | 11.0.28.6 | 3 |
| IBM Semeru Runtime Open Edition JDK 17 (LTS) | 17.0.16.8 | 2 |
| IBM Semeru Runtime Open Edition JDK 8 (LTS) | 8.0.462.8 | 2 |
| IBM Semeru Runtime Open Edition JRE 11 (LTS) | 11.0.28.6 | 3 |
| IBM Semeru Runtime Open Edition JRE 17 (LTS) | 17.0.16.8 | 2 |
| IBM Semeru Runtime Open Edition JRE 8 (LTS) | 8.0.462.8 | 2 |
| Liberica JDK | 11.0.28.12 | 7 |
| Liberica JDK | 8.0.462.11 | 6 |
| Liberica JDK | 17.0.16.12 | 6 |
| Liberica JDK Lite | 8.0.462.11 | 6 |
| Liberica JDK Lite | 21.0.8.12 | 6 |
| Liberica JDK Lite | 11.0.28.12 | 7 |
| Liberica JRE | 11.0.28.12 | 7 |
| Liberica JRE | 21.0.8.12 | 6 |
| Liberica JRE | 8.0.462.11 | 6 |
| Microsoft .NET Runtime 8.0 | 8.0.17 | 1 |
| Microsoft .NET Runtime 8.0 | 8.0.17.34916 | 1 |
| Microsoft .NET Runtime 9.0 | 9.0.6 | 1 |
| Microsoft .NET SDK 8.0 | 8.4.1125.26913 | 1 |
| Microsoft .NET SDK 8.0 | 8.0.411 | 1 |
| Microsoft .NET SDK 9.0 | 9.0.301 | 1 |
| Microsoft 365 Apps | 2505 (Build 16.0.18827.20150) | 15 |
| Microsoft 365 Apps | 2504 (Build 16.0.18730.20220) | 15 |
| Microsoft 365 Apps | 16.98.25060824 | 10 |
| Microsoft 365 Apps | 2408 (Build 16.0.17928.20572) | 15 |
| Microsoft 365 Apps | 2506 (Build 16.0.18925.20158) | 13 |
| Microsoft 365 Apps | 2502 (Build 16.0.18526.20472) | 13 |
| Microsoft 365 Apps | 16.99.25071321 | 10 |
| Microsoft 365 Apps | 2505 (Build 16.0.18827.20202) | 13 |
| Microsoft ASP.NET Core Runtime 8.0 | 8.0.17.25266 | 1 |
| Microsoft ASP.NET Core Runtime 8.0 | 8.0.17 | 1 |
| Microsoft ASP.NET Core Runtime 9.0 | 9.0.6 | 1 |
| Microsoft ASP.NET Core Runtime Hosting Bundle 8.0 | 8.0.17.25266 | 1 |
| Microsoft ASP.NET Core Runtime Hosting Bundle 9.0 | 9.0.6 | 1 |
| Microsoft Azure CLI | 2.74.0 | 2 |
| Microsoft Azure CLI | 2.75.0 | 2 |
| Microsoft Azure Kubelogin | 0.2.10 | 2 |
| Microsoft Edge Beta | 137.0.3296.62 | 2 |
| Microsoft Edge Beta | 138.0.3351.65 | 2 |
| Microsoft Edge Beta | 138.0.3351.55 | 6 |
| Microsoft Edge for Business | 138.0.3351.109 | 2 |
| Microsoft Edge for Business | 138.0.3351.121 | 1 |
| Microsoft Edge for Business | 137.0.3296.83 | 2 |
| Microsoft Edge for Business | 137.0.3296.93 | 2 |
| Microsoft Edge for Business | 137.0.3296.62 | 2 |
| Microsoft Edge for Business | 138.0.3351.95 | 3 |
| Microsoft Edge for Business | 138.0.3351.65 | 2 |
| Microsoft Edge for Business | 138.0.3351.55 | 6 |
| Microsoft Project | 2505 (Build 16.0.18827.20150) | 4 |
| Microsoft Remote Desktop | 1.2.6278.0 | 2 |
| Microsoft Remote Desktop | 1.2.6353.0 | 1 |
| Microsoft Visio | 2505 (Build 16.0.18827.20150) | 4 |
| Microsoft Visual Studio 2017 Community | 15.9.36227.7 | 8 |
| Microsoft Visual Studio 2017 Enterprise | 15.9.36227.7 | 8 |
| Microsoft Visual Studio 2017 Professional | 15.9.36227.7 | 8 |
| Microsoft Visual Studio 2019 Community | 16.11.36227.6 | 8 |
| Microsoft Visual Studio 2019 Enterprise | 16.11.36227.6 | 8 |
| Microsoft Visual Studio 2019 Professional | 16.11.36227.6 | 8 |
| Microsoft Visual Studio 2022 Community | 17.14.36301.6 | 8 |
| Microsoft Visual Studio 2022 Enterprise | 17.14.36203.30 | 2 |
| Microsoft Visual Studio 2022 Enterprise | 17.10.36129.12 | 2 |
| Microsoft Visual Studio 2022 Enterprise | 17.12.36129.13 | 2 |
| Microsoft Visual Studio 2022 Enterprise | 17.8.36129.11 | 2 |
| Microsoft Visual Studio 2022 Enterprise | 17.12.36227.10 | 8 |
| Microsoft Visual Studio 2022 Enterprise | 17.14.36301.6 | 8 |
| Microsoft Visual Studio 2022 Enterprise | 17.8.36227.8 | 8 |
| Microsoft Visual Studio 2022 Enterprise | 17.10.36227.11 | 8 |
| Microsoft Visual Studio 2022 Professional | 17.8.36129.11 | 2 |
| Microsoft Visual Studio 2022 Professional | 17.12.36129.13 | 2 |
| Microsoft Visual Studio 2022 Professional | 17.14.36203.30 | 2 |
| Microsoft Visual Studio 2022 Professional | 17.10.36129.12 | 2 |
| Microsoft Visual Studio 2022 Professional | 17.12.36227.10 | 8 |
| Microsoft Visual Studio 2022 Professional | 17.8.36227.8 | 8 |
| Microsoft Visual Studio 2022 Professional | 17.10.36227.11 | 8 |
| Microsoft Visual Studio 2022 Professional | 17.14.36301.6 | 8 |
| Microsoft Visual Studio Feedback Client 2017 | 15.9.36227.7 | 8 |
| Microsoft Visual Studio Team Explorer 2017 | 15.9.36227.7 | 8 |
| Microsoft Visual Studio Team Explorer 2019 | 16.11.36227.6 | 8 |
| Microsoft Visual Studio Team Explorer 2022 | 17.14.36301.6 | 8 |
| Microsoft Windows Desktop Runtime 8.0 | 8.0.17.34917 | 1 |
| Microsoft Windows Desktop Runtime 9.0 | 9.0.6 | 1 |
| Mozilla Firefox | 141.0 | 18 |
| Mozilla Firefox | 140.0 | 10 |
| Mozilla Firefox | 139.0.4 | 2 |
| Mozilla Firefox ESR 115 | 115.26.0 | 4 |
| Mozilla Firefox ESR 115 | 115.25.0 | 2 |
| Mozilla Firefox ESR 128 | 128.13.0 | 9 |
| Mozilla Firefox ESR 128 | 128.12.0 | 5 |
| Mozilla Firefox ESR 140 | 140.1.0 | 13 |
| Mozilla Firefox ESR 140 | 140.0 | 11 |
| Mozilla Thunderbird | 140.1.0 | 14 |
| Mozilla Thunderbird | 141.0 | 16 |
| Mozilla Thunderbird | 139.0.2 | 1 |
| Mozilla Thunderbird | 140.0 | 20 |
| Mozilla Thunderbird | 140.0 | 10 |
| Mozilla Thunderbird ESR 128 | 128.11.1 | 1 |
| Mozilla Thunderbird ESR 128 | 128.12.0 | 4 |
| Mozilla Thunderbird ESR 128 | 128.12.0 | 5 |
| Mozilla Thunderbird ESR 140 | 140.0 | 10 |
| Mozilla Thunderbird ESR 140 | 140.0 | 20 |
| Node.js 20 LTS | 20.19.4 | 1 |
| Node.js 22 LTS | 22.17.1 | 1 |
| Node.js 24 | 24.4.1 | 2 |
| Notepad++ | 8.8.3 | 2 |
| Notepad++ | 8.8.2 | 2 |
| OpenSSL | 3.5.1 | 1 |
| OpenSSL Light | 3.5.1 | 1 |
| Opera One | 120.0.5543.93 | 1 |
| Opera One | 119.0.5497.88 | 8 |
| Opera One | 120.0.5543.38 | 3 |
| Oracle Java Runtime Environment Version 8 | 8.0.4610.11 | 5 |
| Oracle Java SE Development Kit 21 | 21.0.8.0 | 4 |
| Oracle Java SE Development Kit 24 | 24.0.2.0 | 5 |
| Oracle Java SE Development Kit 8 | 8.0.4610.11 | 5 |
| Pale Moon | 33.8.1 | 4 |
| Pale Moon | 33.8.0 | 3 |
| Rarlab WinRAR | 7.12 | 1 |
| Rarlab WinRAR | 7.12 | 2 |
| Red Hat OpenJDK | 1.8.4622.8 | 4 |
| Red Hat OpenJDK | 21.0080.9.1 | 4 |
| Red Hat OpenJDK | 17.0.16.0.8 | 4 |
| Red Hat OpenJDK | 17.00160.8.1 | 4 |
| Red Hat OpenJDK | 21.0.8.0.9 | 4 |
| Red Hat OpenJDK JRE | 17.0.16.0.8 | 4 |
| Red Hat OpenJDK JRE | 21.0.8.0.9 | 4 |
| Red Hat OpenJDK JRE | 21.0080.9.1 | 4 |
| Red Hat OpenJDK JRE | 8.0.462 | 4 |
| Red Hat OpenJDK JRE | 17.00160.8.1 | 4 |
| Snagit 2025 | 2025.2.0 | 2 |
| Splunk Enterprise 9.1 | 9.1.10 | 8 |
| Splunk Enterprise 9.2 | 9.2.7 | 8 |
| Splunk Enterprise 9.3 | 9.3.5 | 8 |
| Splunk Enterprise 9.4 | 9.4.3 | 8 |
| Splunk Universal Forwarder 9.1 | 9.1.10 | 2 |
| Splunk Universal Forwarder 9.2 | 9.2.7 | 2 |
| Splunk Universal Forwarder 9.3 | 9.3.5 | 2 |
| Splunk Universal Forwarder 9.4 | 9.4.3 | 2 |
| TeamCity | 2025.07 | 11 |
| TeamCity | 2025.03.3 | 5 |
| Vivaldi | 7.4.3684.46 | 1 |
| Vivaldi | 7.5.3735.54 | 1 |
| Vivaldi | 7.5.3735.41 | 1 |
| VMware Fusion 13 | 13.6.4.24832108 | 5 |
| VMware Tools 12 | 12.5.3.24819442 | 1 |
| VMware Workstation Pro 17 | 17.6.4.24832109 | 5 |
| Waterfox | 6.5.11 | 4 |
| Waterfox | 6.5.10 | 4 |
| Waterfox | 6.5.10 | 5 |
| Wireshark 4.2 | 4.2.12 | 1 |
| Wireshark 4.4 | 4.4.8 | 1 |
| Wireshark 4.4 | 4.4.7 | 1 |
| Zulu JDK 11 (LTS) | 11.82.19 | 5 |
| Zulu JDK 17 (LTS) | 17.60.17 | 4 |
| Zulu JDK 21 (LTS) | 21.44.17 | 4 |
| Zulu JDK 24 (STS) | 24.32.13.0 | 4 |
| Zulu JDK 8 (LTS) | 8.88.0.19 | 4 |
| Zulu JRE 11 (LTS) | 11.82.19 | 5 |
| Zulu JRE 17 (LTS) | 17.60.17 | 4 |
| Zulu JRE 21 (LTS) | 21.44.17 | 4 |
| Zulu JRE 24 (STS) | 24.32.13.0 | 4 |
| Zulu JRE 8 (LTS) | 8.88.0.19 | 4 |
Conclusion
Fast third-party patching protects your environment. June-July updates close critical gaps across browsers and apps—tightening security and boosting uptime. Check back next month for fresh insights.
Want to cut patch MTTR and shrink your attack surface? Explore our eBook Reduce Your Attack Footprint or follow our App Management and Patching series.
