MS Family October 2025 Routine Security Update Advisory

MS Family October 2025 Routine Security Update Advisory

Overview

 

Microsoft(https://www.microsoft.com) has released a security update that fixes vulnerabilities in products it has supplied. Users of affected products are advised to update to the latest version.

 

Affected Products

 

 

Apps family

Xbox Gaming Services

 

Azure Family

Arc Enabled Servers – Azure Connected Machine Agent

Azure Compute Gallery

Azure Monitor Agent

 

Developer Tools suite

.NET 8.0 installed on Linux

.NET 8.0 installed on Mac OS

.NET 8.0 installed on Windows

.NET 9.0 installed on Linux

.NET 9.0 installed on Mac OS

.NET 9.0 installed on Windows

ASP.NET Core 2.3

ASP.NET Core 8.0

ASP.NET Core 9.0

Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2

Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation)

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019

Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019

Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)

Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022

Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation)

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation)

Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation)

Microsoft .NET Framework 3.5 on Windows Server 2008 for 32-bit Systems Service Pack 2

Microsoft .NET Framework 3.5 on Windows Server 2008 for x64-based Systems Service Pack 2

Microsoft .NET Framework 3.5 on Windows Server 2012

Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)

Microsoft .NET Framework 3.5 on Windows Server 2012 R2

Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)

Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1

Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2

Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2

Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1

Microsoft .NET Framework 4.6.2/4.7/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Microsoft .NET Framework 4.6.2/4.7/4.7/4.7.1/4.7.2 on Windows Server 2012

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)

Microsoft .NET Framework 4.6.2/4.7/4.7/4.7.1/4.7.2 on Windows Server 2012 R2

Microsoft .NET Framework 4.6.2/4.7/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)

Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems

Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems

Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1

Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Microsoft .NET Framework 4.8 on Windows Server 2012

Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)

Microsoft .NET Framework 4.8 on Windows Server 2012 R2

Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)

Microsoft .NET Framework 4.8 on Windows Server 2016

Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)

Microsoft Visual Studio 2017 version 15.9 (includes 15.0 – 15.8)

Microsoft Visual Studio 2019 version 16.11 (includes 16.0 – 16.10)

Microsoft Visual Studio 2022 version 17.10

Microsoft Visual Studio 2022 version 17.12

Microsoft Visual Studio 2022 version 17.14

PowerShell 7.4

PowerShell 7.5

 

ESU Family

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

 

Microsoft Office Suite

Microsoft 365 Apps for Enterprise for 32-bit Systems

Microsoft 365 Apps for Enterprise for 64-bit Systems

Microsoft Access 2016 (32-bit edition)

Microsoft Access 2016 (64-bit edition)

Microsoft Excel 2016 (32-bit edition)

Microsoft Excel 2016 (64-bit edition)

Microsoft Office 2016 (32-bit edition)

Microsoft Office 2016 (64-bit edition)

Microsoft Office 2019 for 32-bit editions

Microsoft Office 2019 for 64-bit editions

Microsoft Office LTSC 2021 for 32-bit editions

Microsoft Office LTSC 2021 for 64-bit editions

Microsoft Office LTSC 2024 for 32-bit editions

Microsoft Office LTSC 2024 for 64-bit editions

Microsoft Office LTSC for Mac 2021

Microsoft Office LTSC for Mac 2024

Microsoft Office for Android

Microsoft PowerPoint 2016 (32-bit edition)

Microsoft PowerPoint 2016 (64-bit edition)

Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Server 2019

Microsoft SharePoint Server Subscription Edition

Microsoft Word 2016 (32-bit edition)

Microsoft Word 2016 (64-bit edition)

Office Online Server

 

Open Source Software Suites

Microsoft/playwright

 

SQL Server Family

Microsoft JDBC Driver 10.2 for SQL Server

Microsoft JDBC Driver 11.2 for SQL Server

Microsoft JDBC Driver 12.10 for SQL Server

Microsoft JDBC Driver 12.2 for SQL Server

Microsoft JDBC Driver 12.4 for SQL Server

Microsoft JDBC Driver 12.6 for SQL Server

Microsoft JDBC Driver 12.8 for SQL Server

Microsoft JDBC Driver 13.2 for SQL Server

 

Server Software Suites

Microsoft Exchange Server 2016 Cumulative Update 23

Microsoft Exchange Server 2019 Cumulative Update 14

Microsoft Exchange Server 2019 Cumulative Update 15

Microsoft Exchange Server Subscription Edition RTM

 

System Center Suite

Microsoft Configuration Manager 2403

Microsoft Configuration Manager 2409

Microsoft Configuration Manager 2503

Microsoft Defender for Endpoint for Linux

 

Windows 系列

Remote Desktop client for Windows Desktop

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows 11 Version 23H2 for ARM64-based Systems

Windows 11 Version 23H2 for x64-based Systems

Windows 11 Version 24H2 for ARM64-based Systems

Windows 11 Version 24H2 for x64-based Systems

Windows 11 Version 25H2 for ARM64-based Systems

Windows 11 Version 25H2 for x64-based Systems

Windows App Client for Windows Desktop

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)

Windows Server 2022, 23H2 Edition (Server Core installation)

Windows Server 2025

Windows Server 2025 (Server Core installation)

 

Resolved Vulnerabilities

 

8 vulnerabilities rated Critical and 162 rated Important were found.

 

Apps family

Critical elevation of privilege vulnerability in Xbox Gaming Services (CVE-2025-59281)

 

Azure family

Critical elevation of privilege vulnerability in Azure Connected Machine Agent (CVE-2025-47989, CVE-2025-58724)

Critical elevation of privilege vulnerabilities in Azure Monitor Agent (CVE-2025-59494, CVE-2025-59285)

Emergency-grade privilege escalation vulnerabilities in Confidential Azure Container Instances (CVE-2025-59291, CVE-2025-59292)

 

Developer Tools suite

Critical information disclosure vulnerability in .NET, .NET Framework, and Visual Studio (CVE-2025-55248)

Critical elevation of privilege vulnerability in .NET (CVE-2025-55247)

Critical security feature bypass vulnerability in ASP.NET Core (CVE-2025-55315)

Highly critical privilege escalation vulnerability in Visual Studio (CVE-2025-55240)

Critical information disclosure vulnerability in Visual Studio (CVE-2025-54132)

 

Microsoft Office Suite

Critical remote code execution vulnerability in Microsoft Office Excel (CVE-2025-59236)

Critical-grade remote code execution vulnerabilities in Microsoft Office Excel (CVE-2025-59231, CVE-2025-59233, CVE-2025-59243, CVE-2025-59224, CVE-2025-59225, CVE-2025-59223)

Critical information disclosure vulnerabilities in Microsoft Office Excel (CVE-2025-59235, CVE-2025-59232)

Critical remote code execution vulnerability in Microsoft Office PowerPoint (CVE-2025-59238)

Critical remote code execution vulnerability in Microsoft Office SharePoint (CVE-2025-59237, CVE-2025-59228)

Critical remote code execution vulnerability in Microsoft Office Visio (CVE-2025-59226)

Critical remote code execution vulnerabilities in Microsoft Office Word (CVE-2025-59221, CVE-2025-59222)

Urgent-grade remote code execution vulnerabilities in Microsoft Office (CVE-2025-59234, CVE-2025-59227)

Critical-grade denial-of-service vulnerability in Microsoft Office (CVE-2025-59229)

 

Open Source Software Suites

Moderate-grade spoofing vulnerability in GitHub (CVE-2025-59288)

 

SQL Server Family

Critical-grade spoofing vulnerability in JDBC Driver for SQL Server (CVE-2025-59250)

 

Server Software Family

Critical elevation of privilege vulnerability in Microsoft Exchange Server (CVE-2025-53782, CVE-2025-59249)

Critical-grade spoofing vulnerability in Microsoft Exchange Server (CVE-2025-59248)

 

System Center Suite

Critical elevation of privilege vulnerabilities in Microsoft Configuration Manager (CVE-2025-55320, CVE-2025-59213)

Critical-grade denial of service vulnerability in Microsoft Defender for Linux (CVE-2025-59497)

 

Windows Family

Critical information disclosure vulnerability in Active Directory Federation Services (CVE-2025-59258)

Critical elevation of privilege vulnerability in Agere Windows Modem Driver (CVE-2025-24990, CVE-2025-24052)

Critical elevation of privilege vulnerability in Azure Local (CVE-2025-55697)

Critical elevation of privilege vulnerability in Connected Devices Platform Service (Cdpsvc) (CVE-2025-58719, CVE-2025-59191)

Critical remote code execution vulnerability in Connected Devices Platform Service (Cdpsvc) (CVE-2025-55326)

Critical spoofing vulnerability in Data Sharing Service Client (CVE-2025-59200)

Critical remote code execution vulnerabilities in Inbox COM Objects (CVE-2025-58732, CVE-2025-58735, CVE-2025-59282, CVE-2025-58730, CVE-2025-58731, CVE-2025-58733, CVE-2025-58734, CVE-2025-58736, CVE-2025-58738)

Critical remote code execution vulnerability in Internet Explorer (CVE-2025-59295)

Critical elevation of privilege vulnerabilities in Microsoft Brokering File System (CVE-2025-48004, CVE-2025-59189)

Critical information disclosure vulnerability in the Microsoft Failover Cluster Virtual Driver (CVE-2025-59260)

Critical elevation of privilege vulnerability in Microsoft Graphics Component (CVE-2025-49708)

Urgent-grade remote code execution vulnerability in Microsoft Graphics Component (CVE-2016-9535)

Critical elevation of privilege vulnerabilities in Microsoft Graphics Component (CVE-2025-59205, CVE-2025-59261)

Critical Denial of Service Vulnerability in Microsoft Graphics Component (CVE-2025-59195)

Critical elevation of privilege vulnerability in Microsoft PowerShell (CVE-2025-25004)

Critical remote code execution vulnerability in the Microsoft Windows Codecs Library (CVE-2025-54957)

Critical denial of service vulnerabilities in Microsoft Windows Search Component (CVE-2025-59190, CVE-2025-59198, CVE-2025-59253)

Critical elevation of privilege vulnerabilities in Microsoft Windows Speech (CVE-2025-58715, CVE-2025-58716)

Critical elevation of privilege vulnerability in Microsoft Windows (CVE-2025-55701)

Critical elevation of privilege vulnerability in Network Connection Status Indicator (NCSI) (CVE-2025-59201)

Critical elevation of privilege vulnerability in the NtQueryInformation Token function (ntifs.h) (CVE-2025-55696)

Critical remote code execution vulnerability in Remote Desktop Client (CVE-2025-58718)

Critical elevation of privilege vulnerability in Software Protection Platform (SPP) (CVE-2025-59199)

Critical elevation of privilege vulnerability in Storport.sys Driver (CVE-2025-59192)

Critical information disclosure vulnerability in TCG TPM2.0 (CVE-2025-2884)

Critical spoofing vulnerability in Virtual Secure Mode (CVE-2025-48813)

Critical elevation of privilege vulnerabilities in Windows Ancillary Function Driver for WinSock (CVE-2025-59242, CVE-2025-58714)

Critical elevation of privilege vulnerabilities in Windows Authentication Methods (CVE-2025-59277, CVE-2025-59275, CVE-2025-59278)

Critical security feature bypass vulnerabilities in Windows BitLocker (CVE-2025-55333, CVE-2025-55338, CVE-2025-55330, CVE-2025-55332, CVE-2025-55337, CVE-2025-55682)

Critical elevation of privilege vulnerabilities in Windows Bluetooth Service (CVE-2025-58728, CVE-2025-59290, CVE-2025-59289)

Critical elevation of privilege vulnerability in Windows COM (CVE-2025-58725)

Critical elevation of privilege vulnerability in Windows Cloud Files Mini Filter Driver (CVE-2025-55680)

Critical information disclosure vulnerability in Windows Cloud Files Mini Filter Driver (CVE-2025-55336)

Critical elevation of privilege vulnerability in Windows Connected Devices Platform Service (CVE-2025-58727)

Critical spoofing vulnerability in Windows Core Shell (CVE-2025-59185, CVE-2025-59244)

Critical information disclosure vulnerability in Windows Cryptographic Services (CVE-2025-58720)

Critical elevation of privilege vulnerabilities in Windows DWM Core Library (CVE-2025-59254, CVE-2025-59255)

Critical elevation of privilege vulnerabilities in Windows DWM (CVE-2025-55681, CVE-2025-58722)

Critical elevation of privilege vulnerabilities in Windows Device Association Broker service (CVE-2025-50174, CVE-2025-55677)

Critical elevation of privilege vulnerabilities in Windows Digital Media (CVE-2025-53150, CVE-2025-50175)

Critical elevation of privilege vulnerability in Windows DirectX (CVE-2025-55678)

Critical denial of service vulnerability in Windows DirectX (CVE-2025-55698)

Critical information disclosure vulnerability in Windows ETL Channel (CVE-2025-59197)

Critical elevation of privilege vulnerabilities in Windows Error Reporting (CVE-2025-55692, CVE-2025-55694)

Critical information disclosure vulnerabilities in Windows Failover Cluster (CVE-2025-47979, CVE-2025-59188)

Critical spoofing vulnerabilities in Windows File Explorer (CVE-2025-58739, CVE-2025-59214)

Critical elevation of privilege vulnerability in Windows Health and Optimized Experiences Service (CVE-2025-59241)

Critical security feature bypass vulnerability in Windows Hello (CVE-2025-53139)

Critical information disclosure vulnerability in Windows High Availability Services (CVE-2025-59184)

Critical elevation of privilege vulnerability in Windows Hyper-V (CVE-2025-55328)

Critical elevation of privilege vulnerabilities in Windows Kernel (CVE-2025-59207, CVE-2025-50152, CVE-2025-55693, CVE-2025-59187, CVE-2025-59194)

Critical Security Feature Bypass Vulnerability in the Windows Kernel (CVE-2025-55334)

Critical information disclosure vulnerabilities in the Windows Kernel (CVE-2025-59186, CVE-2025-55679, CVE-2025-55683, CVE-2025-55699)

Critical-grade denial-of-service vulnerabilities in Windows Local Session Manager (LSM) (CVE-2025-59257, CVE-2025-59259, CVE-2025-58729)

Critical elevation of privilege vulnerability in Windows Management Services (CVE-2025-59193)

Critical information disclosure vulnerability in Windows Management Services (CVE-2025-59204)

Critical information disclosure vulnerability in Windows MapUrlToZone (CVE-2025-59208)

Critical elevation of privilege vulnerability in Windows NDIS (CVE-2025-55339)

Critical elevation of privilege vulnerability in Windows NTFS (CVE-2025-55335)

Critical spoofing vulnerability in Windows NTLM (CVE-2025-59284)

Critical elevation of privilege vulnerabilities in Windows PrintWorkflowUserSvc (CVE-2025-55685, CVE-2025-55686, CVE-2025-55689, CVE-2025-55331, CVE-2025-55684, CVE-2025-55688, CVE-2025-55690, CVE-2025-55691)

Critical information disclosure vulnerabilities in Windows Push Notification Core (CVE-2025-59211, CVE-2025-59209)

Critical elevation of privilege vulnerability in Windows Remote Access Connection Manager (CVE-2025-59230)

Critical security feature bypass vulnerability in Windows Remote Desktop Protocol (CVE-2025-55340)

Critical elevation of privilege vulnerability in Windows Remote Desktop Services (CVE-2025-59202)

Critical remote code execution vulnerability in Windows Remote Desktop (CVE-2025-58737)

Moderate-grade denial of service vulnerability in Windows Remote Procedure Call (CVE-2025-59502)

Critical elevation of privilege vulnerabilities in Windows Resilient File System (ReFS) Deduplication Service (CVE-2025-59206, CVE-2025-59210)

Critical elevation of privilege vulnerability in Windows Resilient File System (ReFS) (CVE-2025-55687)

Critical information disclosure vulnerabilities in Windows Routing and Remote Access Service (RRAS) (CVE-2025-55700, CVE-2025-58717)

Critical Tampering Vulnerability in Windows SMB Client (CVE-2025-59280)

Critical elevation of privilege vulnerability in Windows SMB Server (CVE-2025-58726)

Critical elevation of privilege vulnerability in Windows SSDP Service (CVE-2025-59196)

Critical security feature bypass vulnerability in Windows Secure Boot (CVE-2025-47827)

Critical remote code execution vulnerability in Windows Server Update Service (CVE-2025-59287)

Critical information disclosure vulnerability in the Windows StateRepository API (CVE-2025-59203)

Critical information disclosure vulnerability in Windows Storage Management Provider (CVE-2025-55325)

Critical information disclosure vulnerability in Windows Taskbar Live (CVE-2025-59294)

Critical information disclosure vulnerability in Windows USB Video Driver (CVE-2025-55676)

Critical elevation of privilege vulnerability in Windows Virtualization-Based Security (VBS) Enclave (CVE-2025-53717)

Critical information disclosure vulnerability in Windows WLAN Auto Config Service (CVE-2025-55695)

Critical elevation of privilege vulnerability in Xbox (CVE-2025-53768)

 

Vulnerability Patches

 

The following product-specific vulnerability patches were made available in the October 14, 2025 Update Please use the Windows Update feature for automatic installation or refer to the URLs in the product information below to download and install.