Skip to content
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws

2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws

Written By Anoop C Nair
Last Updated May 14, 2025
Posted In Intune
SHARE

Let’s discuss 2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws. Patch Tuesday update of Windows 10 KB5058379 has been released by Microsoft. Different Security features can be accessed with the May 2025 Patch Tuesday Update.

Microsoft provide security features along with the Patch Tuesday update on Windows 11. Mainly, there are 2 KB updates available on Windows 11. You can check the Patch Tuesday update of Windows 11 on KB5058411 and KB5058405.

One of the Notable known issue in Windows 10 is Security update might impact Linux boot in dual-boot setup devices. This issue occurred after installing the August 2024 Windows security update. This issue is affecting Windows 10 device by several months.

There are some improvements, and known issues are addressed by Microsoft. One of the Improvements on Windows 10 is related to the Windows Kernel. Windows Kernel Vulnerable Driver Blocklist (DriverSiPolicy.p7b) Update.

Patch My PC
2025 May KB5058379 Windows 10 Patch # Zero-Day Vulnerabilities and ## Flaws - Fig.1
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Fig.1

KB5058379 Zero Day Security Vulnerabilities for May 2025

In May 2025, Microsoft addressed 7 Zero-day vulnerabilities. It includes CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability, CVE-2025-32709 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability,.

CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability, CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability, CVE-2025-30400 Microsoft DWM Core Library Elevation of Privilege Vulnerability, CVE-2025-32702 Microsoft DWM Core Library Elevation of Privilege Vulnerability, CVE-2025-26685 Microsoft Defender for Identity Spoofing Vulnerability.

CVE NumberCVE TitlePublicly DisclosedExploitability AssessmentExploited
CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityNoExploitation DetectedYes
CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityNoExploitation DetectedYes
CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityNoExploitation DetectedYes
CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityNoExploitation DetectedYes
CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityNoExploitation DetectedYes
CVE-2025-32702Visual Studio Remote Code Execution VulnerabilityYesExploitation DetectedNo
CVE-2025-26685Microsoft Defender for Identity Spoofing VulnerabilityYesExploitation DetectedNo
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Table.1
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws - Fig.2
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Fig.2

May 2025 Windows 10 Patch

Microsoft addressed the fixed issue on May 2025 Patch Tuesday Update. The check for GPU paravirtualisation was case-sensitive in Windows Subsystem for Linux 2.

Windows 10 22H2
KB5058379
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Table.2

Updated Version of Windows 10 After InstallingKB5058379 May 2025 Patch

Windows 10 device security can be ensured by the Patch Tuesday Update of May 2025. The last features can be explored after the patch Tuesday update of Windows 10. This update shows the version number and build number. The following list shows the details.

New Improvements with Windows 10 May Patches

There are 2 improvements that can be seen on Windows 10 devices along with May 2025 patch tuesday update. Microsoft bring miscellaneous security improvements to internal Windows OS functionality. More details Windows 10 devices are shown on the below table.

New Improvements May PatchesDetails
Security Improvement on Internal Windows OSWith this update, Microsoft bring miscellaneous security improvements to internal Windows OS functionality.
Windows Kernel Vulnerable Driver Blocklist (DriverSiPolicy.p7b) UpdateWindows Kernel Vulnerable Driver Blocklist (DriverSiPolicy.p7b) Update. Additions have been made to the blocklist drivers with security vulnerabilities that have been used in Bring Your Own Vulnerable Driver (BYOVD) attacks.
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Table.3

Issues Fixed with Windows 10 May Patch

Windows 10 has 1 fixed issue that is addressed by Microsoft. Issue on GPU paravirtualization. The check for GPU paravirtualisation was case-sensitive in Windows Subsystem for Linux 2 (WSL2).

Fixes with Windows 10 May PatchDetails
Issue on GPU paravirtualisation, which is fixed by MicrosoftMicrosoft has updated an issue on GPU paravirtualisation. The check for GPU paravirtualisation was case-sensitive in Windows Subsystem for Linux 2 (WSL2). This issue might potentially cause GPU paravirtualisation support to fail. Microsoft Fixed this issue.
2025 MayKB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Table.4
2025 May KB5058379 Windows 10 Patch 7# Zero-Day Vulnerabilities and 72 Flaws - Fig.3
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Fig.3

Known Issues – Windows 10 KB5058379 May Patch

The Windows RE update might show as unsuccessful in Windows Update. Users got error messages in the Windows Update settings page: 0x80070643 – ERROR_INSTALL_FAILURE. This error message is not accurate and does not impact the update or device functionality. The table below shows more information.

SummaryOriginating UpdateDetails
Microsoft identified an issue with the Windows Recovery Environment update after installing the April 2025OS KB5057589Working on a final resolution
Linux boot in dual-boot setup devices affected by an issue. Device might fail to boot Linux and show the error message “Verifying shim SBAT data failed due to this issue.OS Build 19044.4780Working on a final resolution
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Table.5
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws - Fig.4
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Fig.4

Intune and SCCM Windows 10 May Patch Deployment

In enterprise environments, Microsoft Intune and SCCM can be used for patch management. You can use these tools to deploy Windows 10 KB5058379 May Cumulative Update using Intune + WUfB and SCCM + WSUS.

SCCM – Learn more about SCCM patch deployments from how to create a Deploy New Software Update Patch Package Using SCCM ConfigMgrSCCM ADR Automatic Deployment Rule Creation Process.

Intune – You can expedite the deployment and Installation of May 2025 patches using Intune.

How to Manually Windows 10 May Patches for Offline Install

The cumulative update for Windows 10 KB5058379 of May 2025 can be easily accessed from the Intune Update Catalog. The Microsoft Update Catalog website allows you to manually download the cumulative update. The tables below provide direct links to download the May 2025 Cumulative Updates for Windows 10.

You can check the Microsoft Update Catalog portal to get the direct download links to the hotfixes for the May 2025 LCU. Check this out: Microsoft Update Catalog –  https://www.catalog.update.microsoft.com/ and Search Keyword 2025-05.

TitleProductSizeDirect Download
2025-05 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5058379)Windows 10 22H2713.0 MBDownload
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Table.6
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws - Fig.5
2025 May KB5058379 Windows 10 Patch 7 Zero-Day Vulnerabilities and 72 Flaws – Fig.5

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Resource

May 13, 2025—KB5058379 (OS Builds 19044.5854 and 19045.5854)

Author

Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read