Monthly Fallout Report
August 2025 Fallout
107 flaws, a Kerberos zero-day, and graphics RCEs that need no user click. CVSS 9.8. Brace for impact.
Tired of patch chaos? Automox automates patching across Windows, Mac, and Linux — so you're never caught off guard on Patch Tuesday.
Try Free →Fallout Timeline
August 2025 drops 107 vulnerabilities including a publicly disclosed Kerberos zero-day (CVE-2025-53779) that could hand attackers domain admin keys. Critical RCEs in Windows Graphics (CVE-2025-50165, CVSS 9.8) and GDI+ (CVE-2025-53766, CVSS 9.8) threaten systems via malicious JPEGs or documents — no user click required. Exchange Server's hybrid flaw (CVE-2025-53786) risks cloud hijacks. Windows 10 (KB5063709) and Windows 11 (KB5063878) are this month's main deployments. Patch or perish.
Windows Kerberos Elevation of Privilege — zero-day, publicly disclosed. Patch domain controllers immediately.
Windows Graphics RCE — no user interaction required. Triggered via malicious JPEG or document. Critical.
Windows GDI+ RCE — no user interaction required. Triggered via malicious document. Critical.
Exchange Server hybrid configuration flaw — risks cloud environment hijacking.
Sources: r/sysadmin · BleepingComputer · Neowin
Three days into August's fallout, chaos reigns! KB5063709 triggers NDI audio/video delays on Windows 10 — switch to TCP/UDP workarounds for now. Event ID 57 errors are flooding Event Viewer but have no major impact reported. WSUS sync failures (error 0x80240069) are being reported, fixed by re-syncing the catalog. Reset/recovery failures are hitting Windows 10/11 — a post-Aug 19 patch addressed this. Patch Exchange servers ASAP given the hybrid flaw risk.
- Windows 10 KB5063709 triggering NDI audio/video delays — switch to TCP/UDP as workaround
- Windows 10/11 Reset/recovery failures reported — out-of-band updates KB5066188/KB5066189 address this
- WSUS WSUS sync failures (error 0x80240069) — re-sync catalog to resolve
- Miscellaneous Event ID 57 errors flooding Event Viewer — no major operational impact reported
Sources: r/sysadmin · WZorNET · htmdcommunity
Two weeks out, out-of-band updates KB5066188 and KB5066189 resolved the reset/recovery failures on Windows 10/11. However NDI streaming delays persist for media professionals. New SSD failure reports are surfacing on Windows 11 24H2 during large file writes — check your drives! No exploitation of the Kerberos zero-day (CVE-2025-53779) confirmed yet, but patch those domain controllers now. WSUS sync issues linger for some admins.
- Windows 10/11 OOB updates KB5066188/KB5066189 fix reset/recovery failures — apply now
- Windows 10 NDI streaming delays persist for media professionals — no fix yet
- Windows 11 24H2 SSD failure reports during large file writes — monitor and check drive health
- WSUS WSUS sync issues persist for some — re-sync catalog as workaround
Sources: r/sysadmin · BleepingComputer · Neowin
Resources