Home › Microsoft Patch Tuesday › November 2025

Microsoft Patch Tuesday, November 2025

·

Microsoft's November 2025 security release, published November 11, 2025: 31 updates fixing 49 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

31
Updates (KBs)
49
CVEs fixed
1
On the CISA KEV list
1
Ransomware-linked
24
Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-62215Windows Kernel Elevation of Privilege VulnerabilityCVSS 7.0Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-60724Windows GDI+ Remote Code Execution VulnerabilityCVSS 9.8
CVE-2025-64678Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-59499Microsoft SQL Server Elevation of Privilege VulnerabilityCVSS 8.8

Products fixed this month

Windows Server 2022 (2)Windows Server 2022 (Server Core installation) (2)Windows Server 2025 (Server Core installation) (2)Windows 11 Version 24H2 for ARM64-based Systems (2)Windows 11 Version 24H2 for x64-based Systems (2)Windows Server 2025 (2)Windows 11 Version 25H2 for ARM64-based Systems (2)Windows 11 Version 25H2 for x64-based Systems (2)Windows Server 2008 for 32-bit Systems Service Pack 2 (2)Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) (2)

Every update in this release

All 31 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

UpdateSeverityMax CVSSCVEs fixedProductsAlso
KB5068791 ExploitedCritical9.834Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, and 1 moreSupport · Catalog
KB5068787 ExploitedCritical9.830Windows Server 2022, Windows Server 2022 (Server Core installation)Support · Catalog
KB5068840 ExploitedCritical9.830Windows Server 2022, Windows Server 2022 (Server Core installation)Support · Catalog
KB5068781 ExploitedCritical9.833Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, and 3 moreSupport · Catalog
KB5068861 ExploitedCritical9.835Windows Server 2025 (Server Core installation), Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, and 3 moreSupport · Catalog
KB5068966 ExploitedCritical9.835Windows Server 2025 (Server Core installation), Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, and 3 moreSupport · Catalog
KB5068865 ExploitedCritical9.833Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based SystemsSupport · Catalog
KB5068779 ExploitedCritical9.832Windows Server 2022, 23H2 Edition (Server Core installation)Support · Catalog
KB5068864Critical9.826Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, and 1 moreSupport · Catalog
KB5068906Critical9.815Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2, and 1 moreSupport · Catalog
KB5068909Critical9.815Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2, and 1 moreSupport · Catalog
KB5068904Critical9.815Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Support · Catalog
KB5068908Critical9.815Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Support · Catalog
KB5068907Critical9.817Windows Server 2012, Windows Server 2012 (Server Core installation)Support · Catalog
KB5068905Critical9.818Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)Support · Catalog
KB5068403High8.81Microsoft SQL Server 2017 for x64-based Systems (GDR)Support · Catalog
KB5068405High8.81Microsoft SQL Server 2019 for x64-based Systems (GDR)Support · Catalog
KB5068401High8.81Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5068400High8.81Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature PackSupport · Catalog
KB5068402High8.81Microsoft SQL Server 2017 for x64-based Systems (CU 31)Support · Catalog
KB5068407High8.81Microsoft SQL Server 2022 for x64-based Systems (GDR)Support · Catalog
KB5068404High8.81Microsoft SQL Server 2019 for x64-based Systems (CU 32)Support · Catalog
KB5068406High8.81Microsoft SQL Server 2022 for x64-based Systems (CU 21)Support · Catalog
KB5002805High8.01Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002803High8.01Microsoft SharePoint Server 2019Support · Catalog
KB5002800High8.01Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002809High7.81Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)Support · Catalog
KB5002811High7.87Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)Support · Catalog
KB5002801High7.86Office Online ServerSupport · Catalog
KB5002810High7.83Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)Support · Catalog
KB5067331Medium6.51Microsoft Dynamics 365 (on-premises) version 9.1Support · Catalog
Take this release to your AI

Composed from the November 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

See every Patch Tuesday, all months  |  The live Microsoft patch tracker

← October 2025December 2025 →

Now see your own patch state.

Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and turns this release into your list: every update still missing, on every device, ranked by what attackers are actually exploiting. The 650+ configuration checks come with it.

1Find it2Fix it3Prove it
Start my free patch auditAll you do is register.
Reference: Microsoft CVE and vulnerability management, ranked by real-world risk, and the Microsoft patching guide.
Data notice: this page is provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative Microsoft advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.