CVEs have been published or revised in the Security Update Guide
June 17, 2025
These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:
CVE-2025-21264
Title: Visual Studio Code Security Feature Bypass Vulnerability
Version: 2.0
Reason for revision: In the Security Updates Table, added Microsoft Visual Studio CoPilot Chat Extension as it is also affected by this vulnerability. Microsoft recommends that customers install the update to be fully protected from the vulnerability.
Originally released: May 13, 2025
Last updated: June 17, 2025
Aggregate CVE severity rating: Important
Customer action required: Yes
CVE-2025-29833
Title: Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Version: 1.1
Reason for revision: Added an FAQ and updated the CVSS score. This is an informational change only.
Originally released: May 13, 2025
Last updated: May 14, 2025
Aggregate CVE severity rating: Critical
Customer action required: Yes