CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

71vulnerabilities fixed (CVEs)

12of them critical

1exploited (zero-day)

0publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday November 2025

71 vulnerabilities

CVE-2025-62215ImportantCVSS 7.0Exploited (zero-day)Elevation of privilege

Windows Kernel Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-49752CriticalCVSS 10.0Elevation of privilege

Azure Bastion Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2025-59245CriticalCVSS 9.8Elevation of privilege

Microsoft SharePoint Online Elevation of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2025-60724CriticalCVSS 9.8Remote code execution

Windows GDI+ Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates), Microsoft Office · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-64657CriticalCVSS 9.8Elevation of privilege

Azure Application Gateway Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2025-64656CriticalCVSS 9.4Elevation of privilege

Azure Application Gateway Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2025-64655CriticalCVSS 8.8Elevation of privilege

Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

Microsoft Dynamics · MSRC

CVE-2025-62207CriticalCVSS 8.6Elevation of privilege

Azure Monitor Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2025-62459CriticalCVSS 8.3Spoofing

Microsoft Defender Portal Spoofing Vulnerability

Windows · MSRC

CVE-2025-30398CriticalCVSS 8.1Information disclosure

Nuance PowerScribe 360 Information Disclosure Vulnerability

Other · MSRC

CVE-2025-62199CriticalCVSS 7.8Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · KB5002809 · MSRC

CVE-2025-60716CriticalCVSS 7.0Elevation of privilege

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-62214CriticalCVSS 6.7Remote code execution

Visual Studio Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2025-59499ImportantCVSS 8.8Elevation of privilege

Microsoft SQL Server Elevation of Privilege Vulnerability

SQL Server · KB5068403 KB5068405 KB5068401 KB5068400 · MSRC

CVE-2025-62220ImportantCVSS 8.8Remote code execution

Windows Subsystem for Linux GUI Remote Code Execution Vulnerability

Open source software · MSRC

CVE-2025-62222ImportantCVSS 8.8Remote code execution

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2025-62210ImportantCVSS 8.7Spoofing

Dynamics 365 Field Service (online) Spoofing Vulnerability

Microsoft Dynamics · MSRC

CVE-2025-62211ImportantCVSS 8.7Spoofing

Dynamics 365 Field Service (online) Spoofing Vulnerability

Microsoft Dynamics · MSRC

CVE-2025-60715ImportantCVSS 8.0Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-62204ImportantCVSS 8.0Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Office · KB5002805 KB5002803 KB5002800 · MSRC

CVE-2025-62452ImportantCVSS 8.0Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-64660ImportantCVSS 8.0Remote code execution

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2025-59505ImportantCVSS 7.8Elevation of privilege

Windows Smart Card Reader Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-59511ImportantCVSS 7.8Elevation of privilege

Windows WLAN Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-59512ImportantCVSS 7.8Elevation of privilege

Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-59514ImportantCVSS 7.8Elevation of privilege

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-60703ImportantCVSS 7.8Elevation of privilege

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-60705ImportantCVSS 7.8Elevation of privilege

Windows Client-Side Caching Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-60707ImportantCVSS 7.8Elevation of privilege

Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-60709ImportantCVSS 7.8Elevation of privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068861 KB5068966 KB5068791 KB5068787 · MSRC

CVE-2025-60710ImportantCVSS 7.8Elevation of privilege

Host Process for Windows Tasks Elevation of Privilege Vulnerability

Windows · KB5072033 KB5072014 · MSRC

CVE-2025-60713ImportantCVSS 7.8Elevation of privilege

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Windows · KB5068791 KB5068787 KB5068840 KB5068861 · MSRC

CVE-2025-60714ImportantCVSS 7.8Remote code execution

Windows OLE Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-60718ImportantCVSS 7.8Elevation of privilege

Windows Administrator Protection Elevation of Privilege Vulnerability

Windows · KB5068861 KB5068966 · MSRC

CVE-2025-60720ImportantCVSS 7.8Elevation of privilege

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-60721ImportantCVSS 7.8Elevation of privilege

Windows Administrator Protection Elevation of Privilege Vulnerability

Windows · KB5068861 KB5068966 · MSRC

CVE-2025-60727ImportantCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002801 KB5002811 KB5002810 · MSRC

CVE-2025-62200ImportantCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002801 KB5002811 · MSRC

CVE-2025-62201ImportantCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002801 KB5002811 · MSRC

CVE-2025-62203ImportantCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002801 KB5002811 · MSRC

CVE-2025-62205ImportantCVSS 7.8Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · MSRC

CVE-2025-62216ImportantCVSS 7.8Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · MSRC

CVE-2025-60704ImportantCVSS 7.5Elevation of privilege

Windows Kerberos Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-59504ImportantCVSS 7.3Remote code execution

Azure Monitor Agent Remote Code Execution Vulnerability

Azure · MSRC

CVE-2025-60726ImportantCVSS 7.1Information disclosure

Microsoft Excel Information Disclosure Vulnerability

Microsoft Office · KB5002801 KB5002811 KB5002810 · MSRC

CVE-2025-62202ImportantCVSS 7.1Information disclosure

Microsoft Excel Information Disclosure Vulnerability

Microsoft Office · KB5002801 KB5002811 KB5002810 · MSRC

CVE-2025-59506ImportantCVSS 7.0Elevation of privilege

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-59507ImportantCVSS 7.0Elevation of privilege

Windows Speech Runtime Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-59508ImportantCVSS 7.0Elevation of privilege

Windows Speech Recognition Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC

CVE-2025-59515ImportantCVSS 7.0Elevation of privilege

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068781 KB5068861 KB5068966 · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed