Azure Networking Elevation of Privilege Vulnerability
Azure
Patch Tuesday
Patch Tuesday September 2025 – known issues, zero-days and what to do
On 9 Sep 2025 Microsoft fixed 94 vulnerabilities – critical: 13, already exploited (zero-days): 0. Known issues with the updates: none known.
94vulnerabilities
13critical
0zero-days
0known issues
What to do now
- 13 critical vulnerabilities (mainly Windows, Microsoft Office, Azure) – roll out promptly after a short test.
- Taking effect on 9 Sep 2025: “Windows Server: Kerberos certificate-based authentication enforced on domain controllers (KB5014754)” – check in good time.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
According to Microsoft, no vulnerability of this month is being exploited yet.
Critical vulnerabilities (13)
Azure Entra ID Elevation of Privilege Vulnerability
Azure
Azure Bot Service Elevation of Privilege Vulnerability
Azure
Windows NTLM Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5065428 KB5065432 KB5065306 KB5065429
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002781
Windows Graphics Component Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5065428 KB5065432 KB5065306 KB5065429
Show 7 more critical vulnerabilities
Windows Hyper-V Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5065428 KB5065432 KB5065306 KB5065429
Windows Graphics Component Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5065432 KB5065306 KB5065429 KB5065431
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Microsoft Dynamics
Graphics Kernel Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5065428 KB5065432 KB5065306 KB5065429
Graphics Kernel Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5065428 KB5065432 KB5065306 KB5065429
Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability
Apps
Windows Imaging Component Information Disclosure Vulnerability
Windows, Windows ESU (Extended Security Updates), Microsoft Office · KB5065428 KB5065432 KB5065306 KB5065429
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5065426 | Windows | 59 | none known |
| KB5065432 | Windows | 55 | none known |
| KB5065306 | Windows | 55 | none known |
| KB5065428 | Windows | 50 | none known |
| KB5065431 | Windows | 46 | none known |
| KB5065429 | Windows | 45 | none known |
| KB5065474 | Windows | 21 | none known |
| KB5065425 | Windows | 15 | none known |
| KB5002782 | Microsoft Office | 7 | none known |
| KB5002776 | Microsoft Office | 6 | none known |
| KB5002778 | Microsoft Office | 3 | none known |
| KB5002775 | Microsoft Office | 3 | none known |
Show 15 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5002781 | Microsoft Office | 2 | none known |
| KB5065224 | SQL Server | 2 | none known |
| KB5065223 | SQL Server | 2 | none known |
| KB5065226 | SQL Server | 2 | none known |
| KB5065227 | SQL Server | 2 | none known |
| KB5065225 | SQL Server | 2 | none known |
| KB5065221 | SQL Server | 2 | none known |
| KB5002784 | Microsoft Office | 1 | none known |
| KB5002762 | Microsoft Office | 1 | none known |
| KB5002777 | Microsoft Office | 1 | none known |
| KB5002774 | Microsoft Office | 1 | none known |
| KB5002780 | Microsoft Office | 1 | none known |
| KB5002576 | Microsoft Office | 1 | none known |
| KB5002766 | Microsoft Office | 1 | none known |
| KB5002779 | Microsoft Office | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
Dated changes this month
In effectDated change
Windows Server: Kerberos certificate-based authentication enforced on domain controllers (KB5014754)
Following CVE-2022-26923, CVE-2022-26931 and CVE-2022-34691, domain controllers require strong certificate mappings for Kerberos certificate-based authentication. Since the September 9, 2025 update, the option to revert to Compatibility mode is no longer supported, so certificates without strong mapping are rejected. The change is live.
Microsoft · Windows Server
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.