Microsoft November 2025 Patch Tuesday fixes 1 zero-day, 63 flaws

Today marks Microsoft’s November 2025 Patch Tuesday, a significant event in the tech calendar, as it brings essential security updates addressing a total of 63 vulnerabilities, including a zero-day flaw that is currently being exploited. Among the updates, four vulnerabilities have been classified as “Critical,” with two related to remote code execution, one concerning elevation of privileges, and the last being an information disclosure issue.

• 29 Elevation of Privilege Vulnerabilities
• 2 Security Feature Bypass Vulnerabilities
• 16 Remote Code Execution Vulnerabilities
• 11 Information Disclosure Vulnerabilities
• 3 Denial of Service Vulnerabilities
• 2 Spoofing Vulnerabilities

It is noteworthy that the count of vulnerabilities reported today does not include those addressed in earlier updates for Microsoft Edge and Mariner. Additionally, this Patch Tuesday is particularly significant as it marks the first extended security update (ESU) for Windows 10. Users still operating on this unsupported system are strongly encouraged to upgrade to Windows 11 or enroll in the ESU program. For those encountering difficulties with enrollment, Microsoft has released an out-of-band update to resolve a bug hindering the process.

For further insights into non-security updates released today, interested parties can explore dedicated articles on the Windows 11 KB5066835 and KB5066793 updates, as well as the Windows 10 KB5068781 extended security update. Those experiencing delays or issues with Patch Tuesday updates are invited to join a webinar on December 2, hosted by Action1, which will delve into modern patch management strategies to expedite the patching process and mitigate risks.

1 actively exploited zero-day

This month’s Patch Tuesday addresses a critical zero-day vulnerability in the Windows Kernel. Microsoft defines a zero-day flaw as one that has been publicly disclosed or is actively exploited without an official fix available. The specific vulnerability being addressed is:

CVE-2025-62215 – Windows Kernel Elevation of Privilege Vulnerability

This vulnerability has been exploited to gain SYSTEM privileges on Windows devices. Microsoft describes the flaw as a result of concurrent execution using shared resources with improper synchronization, commonly referred to as a “race condition.” This allows an authorized attacker to elevate their privileges locally. While Microsoft has attributed the discovery of this flaw to its Threat Intelligence Center (MSTIC) and Security Response Center (MSRC), details on the exploitation method remain undisclosed.

Recent updates from other companies

In addition to Microsoft’s updates, several other vendors have also released security advisories in November 2025:

• Adobe has rolled out security updates for various products including InDesign, InCopy, Photoshop, Illustrator, Substance 3D, Pass, and Adobe Format.
• Cisco issued patches for multiple products, including Cisco ASA and Unified Contact Center, while also warning of new attacks exploiting older vulnerabilities.
• expr-eval developers have released patches to address a critical remote code execution vulnerability in their JavaScript library.
• Fortinet has provided a security update for a medium-severity elevation of privileges flaw in FortiOS.
• Google has published the November security bulletin for Android, fixing two vulnerabilities.
• Ivanti has also released security patches as part of its November 2025 Patch Tuesday updates.
• runC has issued updates to fix vulnerabilities that could allow attackers to escape Docker and Kubernetes containers.
• QNAP has released updates for seven zero-day vulnerabilities exploited during the Pwn2Own Ireland 2025 hacking contest.
• SAP has released November security updates for multiple products, including a fix for a critical hardcoded credentials flaw in SQL Anywhere Monitor.
• Samsung has issued its November security updates, addressing 25 vulnerabilities.

The November 2025 Patch Tuesday Security Updates

Below is a comprehensive list of the resolved vulnerabilities in the November 2025 Patch Tuesday updates. For detailed descriptions of each vulnerability and the systems affected, please refer to the full report.