Windows Agere Modem Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5066835 KB5066586 KB5066782 KB5066791
Patch Tuesday
Patch Tuesday October 2025 – known issues, zero-days and what to do
On 14 Oct 2025 Microsoft fixed 180 vulnerabilities – critical: 18, already exploited (zero-days): 2. Known issues with the updates: none known.
180vulnerabilities
18critical
2zero-days
0known issues
What to do now
- Zero-days first: 2 vulnerabilities are already being exploited (CVE-2025-24990, CVE-2025-59230) – install the updates as soon as possible, starting with servers and exposed systems.
- 18 critical vulnerabilities (mainly Windows, Microsoft Office, Azure) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5066586 KB5066782 KB5066791 KB5066793
Critical vulnerabilities (18)
Azure Compute Resource Provider Elevation of Privilege Vulnerability
Azure
Microsoft Graphics Component Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5066586 KB5066782 KB5066791 KB5066793
Azure Entra ID Elevation of Privilege Vulnerability
Azure
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5070883 KB5070884 KB5070892 KB5070881
Azure Entra ID Elevation of Privilege Vulnerability
Azure
Azure Monitor Log Analytics Spoofing Vulnerability
Azure
Show 12 more critical vulnerabilities
M365 Copilot Information Disclosure Vulnerability
Apps
Microsoft Copilot Information Disclosure Vulnerability
Apps
Microsoft Copilot Information Disclosure Vulnerability
Apps
Azure PlayFab Elevation of Privilege Vulnerability
Azure
Redis Enterprise Elevation of Privilege Vulnerability
Azure
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office · KB5002797
Confidential Azure Container Instances Elevation of Privilege Vulnerability
Azure
Azure Compute Gallery Elevation of Privilege Vulnerability
Azure
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002792
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002792
Azure Notification Service Elevation of Privilege Vulnerability
Azure
Azure Event Grid System Elevation of Privilege Vulnerability
Azure
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5066835 | Windows | 126 | none known |
| KB5066780 | Windows | 106 | none known |
| KB5066793 | Windows | 100 | none known |
| KB5066782 | Windows | 96 | none known |
| KB5066586 | Windows | 91 | none known |
| KB5066791 | Windows | 91 | none known |
| KB5002797 | Microsoft Office | 8 | none known |
| KB5066836 | Windows | 8 | none known |
| KB5002794 | Microsoft Office | 7 | none known |
| KB5002788 | Microsoft Office | 6 | none known |
| KB5002796 | Microsoft Office | 6 | none known |
| KB5066367 | Windows ESU (Extended Security Updates) | 3 | none known |
Show 35 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5066368 | Windows ESU (Extended Security Updates) | 3 | none known |
| KB5066366 | Windows ESU (Extended Security Updates) | 3 | none known |
| KB5066369 | Windows ESU (Extended Security Updates) | 3 | none known |
| KB5065432 | Windows | 3 | none known |
| KB5065306 | Windows | 3 | none known |
| KB5065429 | Windows | 3 | none known |
| KB5065431 | Windows | 3 | none known |
| KB5065426 | Windows | 3 | none known |
| KB5002792 | Microsoft Office | 2 | none known |
| KB5068331 | Developer tools (.NET, Visual Studio …) | 2 | none known |
| KB5068332 | Developer tools (.NET, Visual Studio …) | 2 | none known |
| KB5066875 | Windows | 2 | none known |
| KB5002787 | Microsoft Office | 2 | none known |
| KB5002798 | Microsoft Office | 2 | none known |
| KB5002789 | Microsoft Office | 2 | none known |
| KB5002786 | Microsoft Office | 2 | none known |
| KB5002719 | Microsoft Office | 2 | none known |
| KB5002757 | Microsoft Office | 2 | none known |
| KB5065474 | Windows | 2 | none known |
| KB5070883 | Windows | 1 | none known |
| KB5070884 | Windows | 1 | none known |
| KB5070892 | Windows | 1 | none known |
| KB5070881 | Windows | 1 | none known |
| KB5070893 | Windows | 1 | none known |
| KB5070879 | Windows | 1 | none known |
| KB5066837 | Windows | 1 | none known |
| KB5066136 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5066739 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5066740 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5066741 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5066738 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5066743 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5066873 | Windows | 1 | none known |
| KB5002790 | Microsoft Office | 1 | none known |
| KB5065428 | Windows | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.