Monthly Fallout Report
July 2025 Fallout
128 vulnerabilities, a zero-day, a PoC exploit in the wild, and your print spooler's worst nightmare.
Tired of patch chaos? Automox automates patching across Windows, Mac, and Linux — so you're never caught off guard on Patch Tuesday.
Try Free →Fallout Timeline
July 2025 brings 128 vulnerabilities including a zero-day (CVE-2025-49719, Windows Themes privilege escalation) and a PoC exploit (CVE-2025-33073) already in the wild. Windows 10's KB5061010 and Windows 11's KB5061011 are the main deployments. Early reports flagged DHCP Server Service issues on Windows 10. Third-party updates for Chrome, Android, and Roundcube also rolled out — deploy cautiously and test before wide rollout.
Windows Themes Privilege Escalation — zero-day, actively exploited. Patch immediately.
PoC exploit code publicly available. Elevated risk of exploitation in near term.
Sources: r/sysadmin · BleepingComputer · Neowin
Three days in and KB5061010's DHCP Server Service crashes on Windows 10 are forcing rollbacks across the vault. Print spoolers are choking — PrintQueueActionCenter.exe is quitting silently with no fix yet from Microsoft. Kerberos Authentication hardening is now default, breaking legacy systems without the right registry tweaks. WSUS servers are failing to sync or detect updates — check your configs. Stay vigilant.
- Windows 10 KB5061010 causing DHCP Server Service crashes — rollbacks being forced in many environments
- Windows 10/11 PrintQueueActionCenter.exe quitting silently — print spooler failures, no fix yet
- Windows (all) Kerberos Authentication hardening now default — breaking legacy systems without registry tweaks
- WSUS WSUS servers failing to sync or detect updates — check server configurations
Sources: r/sysadmin · WZorNET · htmdcommunity
Two weeks out and KB5062560 has fixed the DHCP Server Service crashes on Windows 10 — IPs are flowing again. However print spoolers are still a nightmare; PrintQueueActionCenter.exe keeps ghosting users with no Microsoft fix yet. Kerberos hardening (CVE-2025-26647) continues to trip up legacy systems — registry tweaks remain your friend. New reports of Azure AD authentication hiccups are slowing enterprise logins. Keep backups ready and monitor logs for auth errors.
- Windows 10 KB5062560 released — fixes DHCP Server Service crashes, apply now
- Windows 10/11 Print spooler issues persist — PrintQueueActionCenter.exe still ghosting users, try restarting spooler services or rolling back
- Windows (all) Kerberos hardening still tripping legacy systems — apply registry tweaks per Microsoft guidance
- Azure AD New reports of Azure AD authentication hiccups slowing enterprise logins
Sources: r/sysadmin · WZorNET
Resources