cve.bz

Microsoft Patch Tuesday, October 2025: the CVEs

Filter

Microsoft Patch Tuesday October 2025: the CVEs Microsoft published on 14 October 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2025, Aug 2025, Jul 2025, Jun 2025, May 2025, Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.5CVE-2025-59502EPSS 1.1%

    Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

  2. 4.7CVE-2025-59497EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.

  3. 7.8CVE-2025-59494EPSS 0.6%

    Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

  4. 8.8CVE-2025-59295EPSS 1.9%

    Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

  5. 4.6CVE-2025-59294EPSS 0.6%

    Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack.

  6. 8.2CVE-2025-59292EPSS 0.4%

    External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.

  7. 8.2CVE-2025-59291EPSS 0.4%

    External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2025-59290EPSS 0.4%

    Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2025-59289EPSS 0.2%

    Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  10. 5.3CVE-2025-59288EPSS 0.2%

    Improper verification of cryptographic signature in Github: Playwright allows an unauthorized attacker to perform spoofing over an adjacent network.

  11. 9.8CVE-2025-59287KEVExploitEPSS >99.9%

    Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

  12. 7.0CVE-2025-59285EPSS 0.8%

    Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

  13. 5.5CVE-2025-59284EPSS 1.0%

    Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

  14. 7.0CVE-2025-59282EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  15. 7.8CVE-2025-59281EPSS 0.4%

    Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

  16. 3.1CVE-2025-59280EPSS 0.5%

    Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

  17. 7.8CVE-2025-59278EPSS 0.3%

    Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2025-59277EPSS 0.4%

    Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2025-59275EPSS 0.3%

    Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

  20. 7.0CVE-2025-59261EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  21. 5.5CVE-2025-59260EPSS 0.4%

    Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally.

  22. 6.5CVE-2025-59259EPSS 1.5%

    Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

  23. 6.2CVE-2025-59258EPSS 0.6%

    Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally.

  24. 6.5CVE-2025-59257EPSS 1.5%

    Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

  25. 7.8CVE-2025-59255EPSS 0.4%

    Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2025-59254ExploitEPSS 1.1%

    Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  27. 5.5CVE-2025-59253EPSS 0.3%

    Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

  28. 8.1CVE-2025-59250EPSS 0.7%

    Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.

  29. 8.8CVE-2025-59249EPSS 0.8%

    Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  30. 7.5CVE-2025-59248EPSS 1.0%

    Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  31. 6.5CVE-2025-59244EPSS 0.8%

    External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

  32. 7.8CVE-2025-59243EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  33. 7.8CVE-2025-59242EPSS 0.4%

    Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2025-59241EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2025-59238EPSS 0.4%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  36. 8.8CVE-2025-59237EPSS 2.5%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  37. 7.8CVE-2025-59236EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  38. 7.1CVE-2025-59235EPSS 0.7%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  39. 7.8CVE-2025-59234EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  40. 7.8CVE-2025-59233EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  41. 7.1CVE-2025-59232EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  42. 7.8CVE-2025-59231EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  43. 7.8CVE-2025-59230KEVEPSS 2.7%

    Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  44. 5.5CVE-2025-59229EPSS 0.4%

    Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.

  45. 8.8CVE-2025-59228EPSS 1.4%

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  46. 7.8CVE-2025-59227EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  47. 7.8CVE-2025-59226EPSS 0.4%

    Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2025-59225EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  49. 7.8CVE-2025-59224EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  50. 7.8CVE-2025-59223EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  51. 7.8CVE-2025-59222EPSS 0.5%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  52. 7.0CVE-2025-59221EPSS 0.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  53. 6.5CVE-2025-59214EPSS 1.9%

    Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

  54. 8.8CVE-2025-59213EPSS 0.4%

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.

  55. 5.5CVE-2025-59211EPSS 0.6%

    Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.

  56. 7.4CVE-2025-59210EPSS 0.3%

    Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

  57. 5.5CVE-2025-59209EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.

  58. 7.1CVE-2025-59208EPSS 0.5%

    Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.

  59. 7.8CVE-2025-59207EPSS 0.4%

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

  60. 7.4CVE-2025-59206EPSS 0.4%

    Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

  61. 7.0CVE-2025-59205EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  62. 5.5CVE-2025-59204EPSS 0.5%

    Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.

  63. 5.5CVE-2025-59203EPSS 0.5%

    Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally.

  64. 7.0CVE-2025-59202EPSS 0.4%

    Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  65. 7.8CVE-2025-59201EPSS 0.5%

    Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

  66. 7.7CVE-2025-59200EPSS 0.8%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.

  67. 7.8CVE-2025-59199EPSS 4.5%

    Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

  68. 5.0CVE-2025-59198EPSS 0.5%

    Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

  69. 5.5CVE-2025-59197EPSS 0.5%

    Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally.

  70. 7.0CVE-2025-59196EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

  71. 7.0CVE-2025-59195EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.

  72. 7.0CVE-2025-59194EPSS 2.8%

    Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.

  73. 7.0CVE-2025-59193EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

  74. 7.8CVE-2025-59192EPSS 0.3%

    Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

  75. 7.8CVE-2025-59191EPSS 0.3%

    Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

  76. 5.5CVE-2025-59190EPSS 0.5%

    Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.

  77. 7.0CVE-2025-59189EPSS 0.3%

    Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

  78. 5.5CVE-2025-59188EPSS 0.4%

    Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally.

  79. 7.8CVE-2025-59187EPSS 0.3%

    Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.

  80. 5.5CVE-2025-59186EPSS 0.6%

    Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

  81. 6.5CVE-2025-59185EPSS 1.1%

    External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

  82. 5.5CVE-2025-59184EPSS 0.4%

    Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to disclose information locally.

  83. 6.5CVE-2025-58739EPSS 0.8%

    Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

  84. 7.0CVE-2025-58738EPSS 0.4%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  85. 7.0CVE-2025-58737EPSS 0.4%

    Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

  86. 7.0CVE-2025-58736EPSS 0.4%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  87. 7.0CVE-2025-58735EPSS 0.5%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  88. 7.0CVE-2025-58734EPSS 0.4%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  89. 7.0CVE-2025-58733EPSS 0.4%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  90. 7.0CVE-2025-58732EPSS 0.5%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  91. 7.0CVE-2025-58731EPSS 0.4%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  92. 7.0CVE-2025-58730EPSS 0.4%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  93. 6.5CVE-2025-58729EPSS 1.1%

    Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

  94. 7.8CVE-2025-58728EPSS 0.4%

    Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  95. 7.0CVE-2025-58727EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

  96. 7.5CVE-2025-58726EPSS 1.1%

    Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

  97. 7.0CVE-2025-58725EPSS 0.3%

    Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

  98. 7.8CVE-2025-58724EPSS 0.6%

    Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

  99. 7.8CVE-2025-58722EPSS 2.3%

    Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.

  100. 7.8CVE-2025-58720EPSS 0.2%

    Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.