What was in the October 2025 Microsoft Patch Tuesday?

Microsoft released 57 updates fixing 138 CVEs in October 2025, of which 4 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › October 2025

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, October 2025

Released October 14, 2025 · data last refreshed 2026-07-12

Microsoft's October 2025 security release, published October 14, 2025: 57 updates fixing 138 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 1 CVE from this release is on the Senserva hot list today (as of 2026-07-13), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.

Updates (KBs)

138

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-59287Windows Server Update Service (WSUS) Remote Code Execution VulnerabilityCVSS 9.8Exploited Hot now

CVE-2025-24990Windows Agere Modem Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-59230Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-47827MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11CVSS 4.6Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-55315ASP.NET Security Feature Bypass VulnerabilityCVSS 9.9

CVE-2025-59295Windows URL Parsing Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-58718Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-54106Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-54110Windows Kernel Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-54918Windows NTLM Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-54113Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-55234Windows SMB Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-21293Active Directory Domain Services Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-59228Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-59237Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-59249Microsoft Exchange Server Elevation of Privilege VulnerabilityCVSS 8.8

Products fixed this month

Windows Server 2019 (16)Windows Server 2022 (16).NET 8.0 installed on Linux (15).NET 9.0 installed on Linux (15).NET 8.0 installed on Mac OS (13)Microsoft SharePoint Enterprise Server 2016 (10)Microsoft SharePoint Server 2019 (10)Windows Server 2019 (Server Core installation) (9)Windows 11 Version 25H2 for x64-based Systems (7)Windows 10 Version 1809 for x64-based Systems (7)

Take this release to your AI

Composed from the October 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the October 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-10, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 57 updates (KBs) fixing 138 CVEs, 4 actively exploited (CISA KEV), 0 ransomware-linked, 11 Critical updates.
Actively exploited CVEs: CVE-2025-59287 (CVSS 9.8), CVE-2025-24990 (CVSS 7.8), CVE-2025-59230 (CVSS 7.8), CVE-2025-47827 (CVSS 4.6).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← September 2025 November 2025 →