Patch Tuesday, May 2025
Microsoft's monthly security release, Tuesday, May 13, 2025. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
5 CVEs · 0 critical · 5 exploited · 3 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
5 CVEs · 0 critical · 5 exploited · 3 with public exploit code
- 7.8HighMay 13, 2025Microsoft Windows Memory corruptionCVE-2025-30400Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.Exploited1.9% likelyExploit code
- 7.8HighMay 13, 2025Microsoft Windows Memory corruptionCVE-2025-32709Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.Exploited1.8% likelyExploit code
- 7.5HighMay 13, 2025Microsoft Windows Memory corruptionCVE-2025-30397Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.Exploited27% likelyExploit codeExploit-DB
- 7.8HighMay 13, 2025Microsoft Windows Memory corruptionCVE-2025-32701Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.Exploited1.4% likely
- 7.8HighMay 13, 2025Microsoft Windows Memory corruptionCVE-2025-32706Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.Exploited2.3% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
1 CVE · 1 critical · 1 exploited · 1 with public exploit code
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.