Microsoft's security release of 14 October 2025
Patch Tuesday, October 2025, page 2
As of , CISA lists three of the 167 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2025-59287, Windows Server Update Service (WSUS) Remote Code Execution.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2025-59241Windows Health and Optimized Experiences Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 102 | CVE-2025-59242Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 103 | CVE-2025-59243Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 104 | CVE-2025-59255Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 105 | CVE-2025-59275Windows Authentication Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 106 | CVE-2025-59277Windows Authentication Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 107 | CVE-2025-59278Windows Authentication Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 108 | CVE-2025-59281Xbox Gaming Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 109 | CVE-2025-59290Windows Bluetooth Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 110 | CVE-2025-53139Windows Hello Security Feature Bypass | None | Not on CISA's list | 7.7 High | 0.00 |
| 111 | CVE-2025-55335Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.4 High | 0.00 |
| 112 | CVE-2025-55687Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 7.4 High | 0.00 |
| 113 | CVE-2025-59189Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.4 High | 0.00 |
| 114 | CVE-2025-59206Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege | None | Not on CISA's list | 7.4 High | 0.00 |
| 115 | CVE-2025-59210Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege | None | Not on CISA's list | 7.4 High | 0.00 |
| 116 | CVE-2025-25004PowerShell Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 117 | CVE-2025-55240Visual Studio Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 118 | CVE-2025-59208Windows MapUrlToZone Information Disclosure | None | Not on CISA's list | 7.1 High | 0.00 |
| 119 | CVE-2025-59232Microsoft Excel Information Disclosure | None | Not on CISA's list | 7.1 High | 0.00 |
| 120 | CVE-2025-50174Windows Device Association Broker Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 121 | CVE-2025-53717Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 122 | CVE-2025-55331Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 123 | CVE-2025-55340Windows Remote Desktop Protocol Security Feature Bypass | None | Not on CISA's list | 7.0 High | 0.00 |
| 124 | CVE-2025-55678DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 125 | CVE-2025-55684Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 126 | CVE-2025-55685Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 127 | CVE-2025-55686Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 128 | CVE-2025-55688Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 129 | CVE-2025-55689Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 130 | CVE-2025-55690Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 131 | CVE-2025-55691Windows PrintWorkflowUserSvc Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 132 | CVE-2025-58725Windows COM+ Event System Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 133 | CVE-2025-58727Windows Connected Devices Platform Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 134 | CVE-2025-58730Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 135 | CVE-2025-58731Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 136 | CVE-2025-58732Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 137 | CVE-2025-58733Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 138 | CVE-2025-58734Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 139 | CVE-2025-58735Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 140 | CVE-2025-58736Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 141 | CVE-2025-58737Remote Desktop Protocol Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 142 | CVE-2025-58738Inbox COM Objects (Global Memory) Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 143 | CVE-2025-59193Windows Management Services Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 144 | CVE-2025-59195Windows Graphics Component Denial of Service | None | Not on CISA's list | 7.0 High | 0.00 |
| 145 | CVE-2025-59196Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 146 | CVE-2025-59202Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 147 | CVE-2025-59205Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 148 | CVE-2025-59221Microsoft Word Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 149 | CVE-2025-59261Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 150 | CVE-2025-59289Windows Bluetooth Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 151 | CVE-2025-59497Microsoft Defender for Linux Denial of Service | None | Not on CISA's list | 7.0 High | 0.00 |
| 152 | CVE-2025-48813Virtual Secure Mode Spoofing | None | Not on CISA's list | 6.3 Medium | 0.00 |
| 153 | CVE-2025-55334Windows Kernel Security Feature Bypass | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 154 | CVE-2025-55695Windows WLAN AutoConfig Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 155 | CVE-2025-59184Storage Spaces Direct Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 156 | CVE-2025-59188Microsoft Failover Cluster Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 157 | CVE-2025-59197Windows ETL Channel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 158 | CVE-2025-59203Windows State Repository API Server File Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 159 | CVE-2025-59209Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 160 | CVE-2025-59229Microsoft Office Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 161 | CVE-2025-59253Windows Search Service Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 162 | CVE-2025-59260Microsoft Failover Cluster Virtual Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 163 | CVE-2025-59288Playwright Spoofing | None | Not on CISA's list | 5.3 Medium | 0.00 |
| 164 | CVE-2025-55679Windows Kernel Information Disclosure | None | Not on CISA's list | 5.1 Medium | 0.00 |
| 165 | CVE-2025-59198Windows Search Service Denial of Service | None | Not on CISA's list | 5.0 Medium | 0.00 |
| 166 | CVE-2025-58719Windows Connected Devices Platform Service Elevation of Privilege | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 167 | CVE-2025-59280Windows SMB Client Tampering | None | Not on CISA's list | 3.1 Low | 0.00 |