cve.bz

Microsoft Patch Tuesday, November 2025: the CVEs

Filter

Microsoft Patch Tuesday November 2025: the CVEs Microsoft published on 11 November 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Oct 2025, Sep 2025, Aug 2025, Jul 2025, Jun 2025, May 2025, Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 5.0CVE-2025-62453EPSS 0.4%

    Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.

  2. 8.0CVE-2025-62452EPSS 0.8%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

  3. 6.8CVE-2025-62449EPSS 0.5%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally.

  4. 8.8CVE-2025-62222EPSS 0.8%

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.

  5. 8.8CVE-2025-62220EPSS 0.7%

    Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.

  6. 7.0CVE-2025-62219EPSS 0.3%

    Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

  7. 7.0CVE-2025-62218EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

  8. 7.0CVE-2025-62217EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2025-62216EPSS 0.4%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  10. 7.0CVE-2025-62215KEVExploitEPSS 4.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

  11. 6.7CVE-2025-62214EPSS 1.1%

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.

  12. 7.0CVE-2025-62213EPSS 1.7%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  13. 8.7CVE-2025-62211EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.

  14. 8.7CVE-2025-62210EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.

  15. 5.5CVE-2025-62209EPSS 0.6%

    Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.

  16. 5.5CVE-2025-62208EPSS 0.6%

    Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.

  17. 6.5CVE-2025-62206EPSS 1.0%

    Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network.

  18. 7.8CVE-2025-62205EPSS 0.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  19. 8.0CVE-2025-62204EPSS 2.2%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  20. 7.8CVE-2025-62203EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  21. 7.1CVE-2025-62202EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  22. 7.8CVE-2025-62201EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  23. 7.8CVE-2025-62200EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  24. 7.8CVE-2025-62199EPSS 0.8%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  25. 4.3CVE-2025-60728EPSS 0.8%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  26. 7.8CVE-2025-60727EPSS 0.7%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  27. 7.1CVE-2025-60726EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  28. 9.8CVE-2025-60724EPSS 6.3%

    Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  29. 6.3CVE-2025-60723EPSS 0.9%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network.

  30. 6.5CVE-2025-60722EPSS 0.9%

    Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.

  31. 7.8CVE-2025-60721EPSS 0.4%

    Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2025-60720EPSS 0.4%

    Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

  33. 7.0CVE-2025-60719EPSS 1.9%

    Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2025-60718EPSS 0.4%

    Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2025-60717EPSS 0.4%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  36. 7.0CVE-2025-60716EPSS 0.4%

    Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

  37. 8.0CVE-2025-60715EPSS 0.8%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

  38. 7.8CVE-2025-60714EPSS 0.6%

    Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.

  39. 7.8CVE-2025-60713EPSS 0.4%

    Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2025-60710KEVEPSS 4.6%

    Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2025-60709EPSS 0.5%

    Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  42. 6.5CVE-2025-60708EPSS 0.5%

    Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

  43. 7.8CVE-2025-60707EPSS 0.5%

    Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally.

  44. 5.5CVE-2025-60706EPSS 0.5%

    Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

  45. 7.8CVE-2025-60705EPSS 2.6%

    Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

  46. 7.5CVE-2025-60704EPSS 0.6%

    Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

  47. 7.8CVE-2025-60703EPSS 0.4%

    Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

  48. 7.0CVE-2025-59515EPSS 0.4%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2025-59514EPSS 0.4%

    Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

  50. 5.5CVE-2025-59513EPSS 0.5%

    Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.

  51. 7.8CVE-2025-59512EPSS 3.2%

    Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.

  52. 7.8CVE-2025-59511EPSS 0.4%

    External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally.

  53. 5.5CVE-2025-59510EPSS 0.5%

    Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.

  54. 5.5CVE-2025-59509EPSS 0.6%

    Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally.

  55. 7.0CVE-2025-59508EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.

  56. 7.0CVE-2025-59507EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.

  57. 7.0CVE-2025-59506EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.

  58. 7.8CVE-2025-59505EPSS 0.4%

    Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

  59. 7.3CVE-2025-59504EPSS 0.4%

    Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.

  60. 8.8CVE-2025-59499EPSS 1.2%

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  61. 5.5CVE-2025-59240EPSS 0.6%

    Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  62. 6.7CVE-2025-47179EPSS 0.4%

    Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.

  63. 8.1CVE-2025-30398EPSS 0.8%

    Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.