Monthly Fallout Report

June 2025 Fallout

66 vulnerabilities, WebDAV zero-day, DHCP Server Service crashing on multiple server versions, and Surface Hub units bricked.

Damage Rating
66
Vulnerabilities
1
Zero-Days
5
Critical RCEs
3
KB Updates

Fallout Timeline

Initial Release — Patch Tuesday Day 0

June 2025 addresses 66 vulnerabilities including a zero-day in WebDAV (CVE-2025-33053). The Windows 10 update (KB5060533) and Windows 11 updates (KB5060842, KB5060999) are the main deployments. Notably, the 24H2 patch was briefly pulled due to compatibility hiccups before being re-released with a cautious rollout. Stay alert — early adopters are your canaries.

CVE-2025-33053 CVSS 7.5

Windows WebDAV Remote Code Execution — zero-day, publicly disclosed. WebDAV-enabled environments should prioritize.

Sources: r/sysadmin · BleepingComputer · Neowin

72 Hours Out +3 Days Issues Active

Three days in and DHCP Server Service is crashing on Server 2016, 2019, 2022, and 2025 — a network admin's nightmare. Surface Hub v1 units are being bricked with Secure Boot Violations after KB5060533. Domain Controller rollouts are at 52% with Active Directory holding steady, though one KB5060526 install returned error 0x80246007 (fixed on retry). The 24H2 cautious rollout is limiting exposure but admins on affected server versions need to act.

Sources: r/sysadmin · WZorNET · htmdcommunity

2 Weeks Out +14 Days Largely Resolved

Two weeks out, Microsoft released KB5063060 to address the Exchange ActiveSync issues. All 200+ Domain Controllers in most environments are fully updated with Active Directory stable. The DHCP Server Service issue lingers for some — keep monitoring. Surface Hub v1 recovery requires a signed .bin file; contact Microsoft Support if affected. One prior KB5060526 glitch (error 0x80246007) resolved on retry for most admins.

Sources: r/sysadmin · BleepingComputer

Resources