CYBERSECURITYTRACKER
Vulnerabilities

October 2025 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 429 vulnerabilities across 429 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.

429all patch recordsClear filters41criticalShow these records3Microsoft exploitation detectedShow these records5Microsoft in the Known Exploited Vulnerabilities catalogShow these records314tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Microsoft 429

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 1 of 3 · records 1 to 200 of 429

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-24990 ↗Windows 11 Version 25H2 for x64-based SystemsImportant7%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Agere Modem Driver Elevation of Privilege Vulnerability
CVE-2025-47827 ↗Windows 10 Version 1809 for 32-bit SystemsImportant5%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5066586KB5066780
and 8 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066873KB5066875
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11
CVE-2025-59230 ↗Windows 10 Version 1809 for 32-bit SystemsImportant3%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2025-59287 ↗Windows Server 2019Critical100%Microsoft rates: Exploitation More LikelyCISA KEVVulnCheckENISAKB5070879KB5070881
and 7 moreKB5070882KB5070883KB5070884KB5070886KB5070887KB5070892KB5070893
1 mentionsWindows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVE-2025-39964 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ModerateOut-of-band2%Microsoft rating unavailableCISA KEVVulnCheckENISA5 mentionscrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
CVE-2025-59273 ↗Azure Event Grid SystemCriticalOut-of-band<1%Microsoft rates: N/AAzure Event Grid System Elevation of Privilege Vulnerability
CVE-2025-59500 ↗Azure Notification ServiceCriticalOut-of-band1%Microsoft rates: N/AAzure Notification Service Elevation of Privilege Vulnerability
CVE-2025-59503 ↗Azure Compute Resource ProviderCriticalOut-of-band1%Microsoft rates: N/AAzure Compute Resource Provider Elevation of Privilege Vulnerability
CVE-2025-39986 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablecan: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
CVE-2025-40000 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablewifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
CVE-2025-39994 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablemedia: tuner: xc5000: Fix use-after-free in xc5000_release
CVE-2025-39981 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableBluetooth: MGMT: Fix possible UAFs
CVE-2025-39973 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablei40e: add validation for ring_len param
CVE-2025-39978 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailable2 mentionsocteontx2-pf: Fix potential use after free in otx2_tc_add_flow()
CVE-2025-39972 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablei40e: fix idx validation in i40e_validate_queue_map
CVE-2025-39971 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablei40e: fix idx validation in config queues msg
CVE-2025-39985 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablecan: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
CVE-2025-39970 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablei40e: fix input validation logic for action_meta
CVE-2025-39968 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablei40e: add max boundary check for VF filters
CVE-2016-9535 ↗Microsoft Office for AndroidCritical5%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
MITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability
CVE-2025-2884 ↗Windows 11 Version 25H2 for x64-based SystemsCritical<1%Microsoft rates: Exploitation Less LikelyPublicly disclosedKB5066780KB5066793
and 2 moreKB5066835KB5077179
Cert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation
CVE-2025-49708 ↗Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Microsoft Graphics Component Elevation of Privilege Vulnerability
CVE-2025-59227 ↗Microsoft Office 2016 (64-bit edition)Critical1%Microsoft rates: Exploitation Less LikelyKB5002792Microsoft Office Remote Code Execution Vulnerability
CVE-2025-59234 ↗Microsoft Office 2016 (32-bit edition)Critical1%Microsoft rates: Exploitation Less LikelyKB5002792Microsoft Office Remote Code Execution Vulnerability
CVE-2025-59236 ↗Office Online ServerCritical<1%Microsoft rates: Exploitation UnlikelyKB5002797Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-59291 ↗Azure Compute GalleryCritical<1%Microsoft rates: Exploitation Less LikelyConfidential Azure Container Instances Elevation of Privilege Vulnerability
CVE-2025-59292 ↗Azure Compute GalleryCritical<1%Microsoft rates: Exploitation Less LikelyAzure Compute Gallery Elevation of Privilege Vulnerability
CVE-2025-0033 ↗Azure Confidential Compute VM SKU ECasv5/ECadsv5CriticalOut-of-band<1%Microsoft rates: Exploitation Less LikelyPublicly disclosedAMD CVE-2025-0033: RMP Corruption During SNP Initialization
CVE-2025-55321 ↗Azure MonitorCriticalOut-of-band<1%Microsoft rates: Exploitation Less LikelyAzure Monitor Log Analytics Spoofing Vulnerability
CVE-2025-59218 ↗Microsoft Entra IDCriticalOut-of-band1%Microsoft rates: Exploitation Less LikelyAzure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59246 ↗Microsoft Entra IDCriticalOut-of-band8%Microsoft rates: Exploitation More LikelyAzure Entra ID Elevation of Privilege Vulnerability
CVE-2025-59247 ↗Azure PlayFabCriticalOut-of-band2%Microsoft rates: Exploitation Less LikelyAzure PlayFab Elevation of Privilege Vulnerability
CVE-2025-59252 ↗Microsoft 365 Word CopilotCriticalOut-of-band1%Microsoft rates: Exploitation Less LikelyM365 Copilot Information Disclosure Vulnerability
CVE-2025-59271 ↗Azure Cache for Redis EnterpriseCriticalOut-of-band1%Microsoft rates: Exploitation Less LikelyRedis Enterprise Elevation of Privilege Vulnerability
CVE-2025-59272 ↗Microsoft 365 Copilot's Business ChatCriticalOut-of-band1%Microsoft rates: Exploitation Less LikelyCopilot Information Disclosure Vulnerability
CVE-2025-59286 ↗Microsoft 365 Copilot's Business ChatCriticalOut-of-band1%Microsoft rates: Exploitation Less LikelyCopilot Information Disclosure Vulnerability
CVE-2025-49844 ↗cbl2 redis 6.2.18-3 on CBL Mariner 2.0CriticalOut-of-band83%Microsoft rating unavailableVulnCheck1 mentionsRedis Lua Use-After-Free may lead to remote code execution
CVE-2025-39943 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
CVE-2025-62168 ↗azl3 squid 6.13-1 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableSquid vulnerable to information disclosure via authentication credential leakage in error handling
CVE-2025-39996 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablemedia: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
CVE-2025-39967 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablefbcon: fix integer overflow in fbcon_do_set_font
CVE-2025-39907 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablemtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
CVE-2025-39898 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablee1000e: fix heap overflow in e1000_set_eeprom
CVE-2025-39925 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablecan: j1939: implement NETDEV_UNREGISTER notification handler
CVE-2025-39910 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablemm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
CVE-2025-62725 ↗azl3 docker-compose 2.27.0-12 on Azure Linux 3.0ImportantOut-of-band16%Microsoft rating unavailableDocker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
CVE-2025-40082 ↗azl3 kernel 6.6.121.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablehfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
CVE-2023-53543 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailablevdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
CVE-2025-12105 ↗azl3 libsoup 3.4.4-10 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableLibsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
CVE-2025-61099 ↗cbl2 frr 8.5.5-4 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableFRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet.
CVE-2025-62230 ↗azl3 xorg-x11-server-Xwayland 24.1.6-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableXorg: xwayland: use-after-free in xkb client resource removal
CVE-2025-61104 ↗cbl2 frr 8.5.5-3 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVE-2025-61100 ↗cbl2 frr 8.5.5-3 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableFRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions.
CVE-2025-61101 ↗cbl2 frr 8.5.5-3 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVE-2025-12060 ↗azl3 keras 3.3.3-4 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableKeras keras.utils.get_file Utility Path Traversal Vulnerability
CVE-2025-60711 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rates: Exploitation Less LikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2025-62229 ↗azl3 xorg-x11-server-Xwayland 24.1.6-2 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableXorg: xmayland: use-after-free in xpresentnotify structure creation
CVE-2025-62231 ↗azl3 xorg-x11-server-Xwayland 24.1.6-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableXorg: xmayland: value overflow in xkbsetcompatmap()
CVE-2025-40093 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: gadget: f_ecm: Refactor bind path to use __free()
CVE-2025-40105 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable2 mentionsvfs: Don't leak disconnected dentries on umount
CVE-2025-40096 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledrm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
CVE-2025-58188 ↗cbl2 msft-golang 1.25.8-1 on CBL-Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailablePanic when validating certificates with DSA public keys in crypto/x509
CVE-2025-61725 ↗cbl2 golang 1.22.7-5 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableExcessive CPU consumption in ParseAddress in net/mail
CVE-2025-40068 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefs: ntfs3: Fix integer overflow in run_unpack()
CVE-2025-40075 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabletcp_metrics: use dst_dev_net_rcu()
CVE-2025-40081 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableperf: arm_spe: Prevent overflow in PERF_IDX2OFF()
CVE-2025-40048 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableuio_hv_generic: Let userspace take care of interrupt mask
CVE-2025-40074 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableipv4: start using dst_dev_rcu()
CVE-2025-62518 ↗azl3 kata-containers-cc 3.15.0.aks0-6 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableastral-tokio-tar Vulnerable to PAX Header Desynchronization
CVE-2025-59530 ↗azl3 coredns 1.11.4-10 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablequic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame
CVE-2025-40018 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableipvs: Defer ip_vs_ftp unregister during netns cleanup
CVE-2025-8677 ↗azl3 bind 9.20.15-1 on Azure Linux 3.0ImportantOut-of-band11%Microsoft rating unavailableResource exhaustion via malformed DNSKEY handling
CVE-2025-40780 ↗azl3 bind 9.20.15-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableCache poisoning due to weak PRNG
CVE-2025-40778 ↗azl3 bind 9.20.15-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableCache poisoning attacks with unsolicited RRs
CVE-2025-59501 ↗Microsoft Configuration Manager 2403ImportantOut-of-band3%Microsoft rating unavailableMicrosoft Configuration Manager Spoofing Vulnerability
CVE-2025-39977 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable2 mentionsfutex: Prevent use-after-free during requeue-PI
CVE-2025-39982 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableBluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
CVE-2025-39987 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecan: hi311x: populate ndo_change_mtu() to prevent buffer overflow
CVE-2025-39998 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: target: target_core_configfs: Add length check to avoid buffer overflow
CVE-2025-39993 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: rc: fix races with imon_disconnect()
CVE-2025-39988 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecan: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
CVE-2025-24052 ↗Windows 11 Version 25H2 for x64-based SystemsImportant3%Microsoft rates: Exploitation More LikelyPublicly disclosedKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Agere Modem Driver Elevation of Privilege Vulnerability
CVE-2025-25004 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
PowerShell Elevation of Privilege Vulnerability
CVE-2025-47979 ↗Windows Server 2025 (Server Core installation)Important1%Microsoft rates: Exploitation Less LikelyKB5066780KB5066835Microsoft Failover Cluster Information Disclosure Vulnerability
CVE-2025-47989 ↗Arc Enabled Servers - Azure Connected Machine AgentImportant1%Microsoft rates: Exploitation UnlikelyArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2025-48004 ↗Windows 11 Version 25H2 for x64-based SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5066780KB5066793
and 1 moreKB5066835
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-48813 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Virtual Secure Mode Spoofing Vulnerability
CVE-2025-50152 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-50174 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066835Windows Device Association Broker Service Elevation of Privilege Vulnerability
CVE-2025-50175 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-53139 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066791KB5066793
and 1 moreKB5066835
Windows Hello Security Feature Bypass Vulnerability
CVE-2025-53150 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 3 moreKB5066791KB5066793KB5066835
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-53717 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066793KB5066835Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2025-53768 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066791
and 4 moreKB5066793KB5066835KB5066836KB5066837
Xbox IStorageService Elevation of Privilege Vulnerability
CVE-2025-53782 ↗Microsoft Exchange Server 2019 Cumulative Update 15Important<1%Microsoft rates: Exploitation Less LikelyKB5066366KB5066367
and 2 moreKB5066368KB5066369
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2025-54132 ↗Microsoft Visual Studio 2022 version 17.14Important<1%Microsoft rates: Exploitation Less LikelyGitHub CVE-2025-54132: Arbitrary Image Fetch in Mermaid Diagram Tool
CVE-2025-54957 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
1 mentionsMITRE CVE-2025-54957: Integer overflow in Dolby Digital Plus audio decoder
CVE-2025-55240 ↗Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)Important<1%Microsoft rates: Exploitation UnlikelyVisual Studio Elevation of Privilege Vulnerability
CVE-2025-55247 ↗.NET 8.0 installed on LinuxImportant1%Microsoft rates: Exploitation Less LikelyKB5068331KB5068332.NET Elevation of Privilege Vulnerability
CVE-2025-55248 ↗.NET 8.0 installed on LinuxImportant1%Microsoft rates: Exploitation Less LikelyKB5066128KB5066129
and 14 moreKB5066131KB5066133KB5066136KB5066738KB5066739KB5066740KB5066741KB5066742KB5066743KB5066746KB5066747KB5066836KB5068331KB5068332
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
CVE-2025-55315 ↗ASP.NET Core 8.0Important67%Microsoft rates: Exploitation Less LikelyKB5068331KB5068332ASP.NET Security Feature Bypass Vulnerability
CVE-2025-55320 ↗Microsoft Configuration Manager 2503Important1%Microsoft rates: Exploitation Less LikelyConfiguration Manager Elevation of Privilege Vulnerability
CVE-2025-55325 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows Storage Management Provider Information Disclosure Vulnerability
CVE-2025-55326 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
CVE-2025-55328 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2025-55330 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066780KB5066793
and 1 moreKB5066835
Windows BitLocker Security Feature Bypass Vulnerability
CVE-2025-55331 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066780KB5066782
and 3 moreKB5066791KB5066793KB5066835
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55332 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows BitLocker Security Feature Bypass Vulnerability
CVE-2025-55333 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows BitLocker Security Feature Bypass Vulnerability
CVE-2025-55334 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066793KB5066835Windows Kernel Security Feature Bypass Vulnerability
CVE-2025-55335 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows NTFS Elevation of Privilege Vulnerability
CVE-2025-55336 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVE-2025-55337 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066835Windows BitLocker Security Feature Bypass Vulnerability
CVE-2025-55338 ↗Windows 11 Version 25H2 for x64-based SystemsImportant3%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows BitLocker Security Feature Bypass Vulnerability
CVE-2025-55339 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066780KB5066782
and 2 moreKB5066793KB5066835
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
CVE-2025-55340 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066780KB5066782
and 3 moreKB5066791KB5066793KB5066835
Windows Remote Desktop Protocol Security Feature Bypass
CVE-2025-55676 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation More LikelyKB5066835Windows USB Video Class System Driver Information Disclosure Vulnerability
CVE-2025-55677 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066835Windows Device Association Broker Service Elevation of Privilege Vulnerability
CVE-2025-55678 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 10 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066875KB5066876
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2025-55679 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Kernel Information Disclosure Vulnerability
CVE-2025-55680 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation More LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2025-55681 ↗Windows 11 Version 25H2 for x64-based SystemsImportant6%Microsoft rates: Exploitation More LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2025-55682 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066835Windows BitLocker Security Feature Bypass Vulnerability
CVE-2025-55683 ↗Windows Server 2019Important1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 3 moreKB5066782KB5066835KB5066836
Windows Kernel Information Disclosure Vulnerability
CVE-2025-55684 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066835Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55685 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066780KB5066782
and 3 moreKB5066791KB5066793KB5066835
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55686 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066780KB5066782
and 3 moreKB5066791KB5066793KB5066835
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55687 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 8 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066873KB5066875
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2025-55688 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066835Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55689 ↗Windows Server 2022Important<1%Microsoft rates: Exploitation Less LikelyKB5066780KB5066782
and 3 moreKB5066791KB5066793KB5066835
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55690 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066835Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55691 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066835Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-55692 ↗Windows 11 Version 25H2 for x64-based SystemsImportant4%Microsoft rates: Exploitation More LikelyKB5066586KB5066780
and 7 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066873
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2025-55693 ↗Windows Server 2025 (Server Core installation)Important2%Microsoft rates: Exploitation More LikelyKB5066835Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-55694 ↗Windows 11 Version 25H2 for x64-based SystemsImportant3%Microsoft rates: Exploitation More LikelyKB5066780KB5066835Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2025-55695 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
CVE-2025-55696 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
CVE-2025-55697 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation UnlikelyKB5066780KB5066835Azure Local Elevation of Privilege Vulnerability
CVE-2025-55698 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066835DirectX Graphics Kernel Denial of Service Vulnerability
CVE-2025-55699 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows Kernel Information Disclosure Vulnerability
CVE-2025-55700 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
CVE-2025-55701 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Authentication Elevation of Privilege Vulnerability
CVE-2025-58714 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-58715 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2025-58716 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2025-58717 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
CVE-2025-58718 ↗Windows App Client for Windows DesktopImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2025-58719 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 5 moreKB5066782KB5066791KB5066793KB5066835KB5066836
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
CVE-2025-58720 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2025-58722 ↗Windows 11 Version 25H2 for x64-based SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5066586KB5066780
and 5 moreKB5066782KB5066791KB5066793KB5066835KB5066836
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2025-58724 ↗Arc Enabled Servers - Azure Connected Machine AgentImportant1%Microsoft rates: Exploitation UnlikelyArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2025-58725 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2025-58726 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows SMB Server Elevation of Privilege Vulnerability
CVE-2025-58727 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066780KB5066791
and 2 moreKB5066793KB5066835
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
CVE-2025-58728 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 3 moreKB5066791KB5066793KB5066835
Windows Bluetooth Service Elevation of Privilege Vulnerability
CVE-2025-58729 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVE-2025-58730 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 10 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066875KB5066876
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58731 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066780KB5066782
and 2 moreKB5066793KB5066835
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58732 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 10 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066875KB5066876
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58733 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58734 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58735 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58736 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58737 ↗Windows Server 2019Important<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 4 moreKB5066782KB5066835KB5066836KB5066873
Remote Desktop Protocol Remote Code Execution Vulnerability
CVE-2025-58738 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 5 moreKB5066782KB5066791KB5066793KB5066835KB5066837
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2025-58739 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 13 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066840KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Microsoft Windows File Explorer Spoofing Vulnerability
CVE-2025-59184 ↗Windows Server 2019Important<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 3 moreKB5066782KB5066835KB5066836
Storage Spaces Direct Information Disclosure Vulnerability
CVE-2025-59185 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 7 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066873
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2025-59186 ↗Windows Server 2019Important1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 3 moreKB5066782KB5066835KB5066836
Windows Kernel Information Disclosure Vulnerability
CVE-2025-59187 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-59188 ↗Windows Server 2019Important<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 5 moreKB5066782KB5066835KB5066836KB5066873KB5066875
Microsoft Failover Cluster Information Disclosure Vulnerability
CVE-2025-59189 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066835Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-59190 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Search Service Denial of Service Vulnerability
CVE-2025-59191 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
CVE-2025-59192 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Storport.sys Driver Elevation of Privilege Vulnerability
CVE-2025-59193 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Management Services Elevation of Privilege Vulnerability
CVE-2025-59194 ↗Windows 11 Version 22H2 for ARM64-based SystemsImportant3%Microsoft rates: Exploitation More LikelyKB5066780KB5066793
and 1 moreKB5066835
Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-59195 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Graphics Component Denial of Service Vulnerability
CVE-2025-59196 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
CVE-2025-59197 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows ETL Channel Information Disclosure Vulnerability
CVE-2025-59198 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Search Service Denial of Service Vulnerability
CVE-2025-59199 ↗Windows 11 Version 25H2 for x64-based SystemsImportant5%Microsoft rates: Exploitation More LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
CVE-2025-59200 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Data Sharing Service Spoofing Vulnerability
CVE-2025-59201 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
CVE-2025-59202 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 7 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066873KB5066875
Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2025-59203 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 6 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837
Windows State Repository API Server File Information Disclosure Vulnerability
CVE-2025-59204 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Management Services Information Disclosure Vulnerability
CVE-2025-59205 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2025-59206 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066835Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-59207 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 4 moreKB5066782KB5066791KB5066793KB5066835
Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-59208 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5066586KB5066780
and 13 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066840KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Windows MapUrlToZone Information Disclosure Vulnerability
CVE-2025-59209 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 8 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066873KB5066875
Windows Push Notification Information Disclosure Vulnerability
CVE-2025-59210 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5066835Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-59211 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 8 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066873KB5066875
Windows Push Notification Information Disclosure Vulnerability
CVE-2025-59213 ↗Microsoft Configuration Manager 2409Important<1%Microsoft rates: Exploitation Less LikelyConfiguration Manager Elevation of Privilege Vulnerability
CVE-2025-59214 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation UnlikelyKB5066586KB5066780
and 12 moreKB5066782KB5066791KB5066793KB5066835KB5066836KB5066837KB5066872KB5066873KB5066874KB5066875KB5066876KB5066877
Microsoft Windows File Explorer Spoofing Vulnerability
CVE-2025-59221 ↗Microsoft SharePoint Enterprise Server 2016Important<1%Microsoft rates: Exploitation UnlikelyKB5002787KB5002788
and 3 moreKB5002789KB5002796KB5002798
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-59222 ↗Microsoft SharePoint Enterprise Server 2016Important<1%Microsoft rates: Exploitation UnlikelyKB5002787KB5002788
and 3 moreKB5002789KB5002796KB5002798
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-59223 ↗Office Online ServerImportant<1%Microsoft rates: Exploitation Less LikelyKB5002794KB5002797Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-59224 ↗Office Online ServerImportant<1%Microsoft rates: Exploitation Less LikelyKB5002794KB5002797Microsoft Excel Remote Code Execution Vulnerability

Glossary

Open in glossary