{"id":11355,"date":"2025-10-15T11:51:45","date_gmt":"2025-10-15T04:51:45","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=11355"},"modified":"2026-06-25T09:56:36","modified_gmt":"2026-06-25T02:56:36","slug":"microsoft-patch-tuesday-october-2025-172-patches-6-zero-day","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/en\/2025\/10\/15\/microsoft-patch-tuesday-october-2025-172-patches-6-zero-day\/","title":{"rendered":"Microsoft Patch Tuesday October 2025: 172 patches (6 zero – day)"},"content":{"rendered":"

Microsoft has released a recurring security update, the October Patch Tuesday, with 172 security vulnerabilities patched, including six zero-day vulnerabilities actively exploited by hackers. This was also a special milestone as Windows 10 officially ended its free support life, making this patch the “last shield” for this popular operating system if users did not register for a paid security renewal.<\/b><\/p>\n

\"Ti\u00eau<\/a>\u200b<\/div>\n

Zero – days are security vulnerabilities that do not have patches at the time they are exploited. During the update, Microsoft confirmed that three vulnerabilities had been exploited in real life and two had been made public before the patch was available, causing a significant increase in the risk of attack.<\/p>\n

Typical zero – day vulnerabilities include:<\/p>\n

    \n
  • CVE-2025-24990<\/b> and CVE-2025-24052:<\/b> The vulnerability escalates the privilege in the Agere Modem driver. Hackers can use these older system drivers to take over administrator control. Microsoft removed the ltmdm64.sys driver from the patch this time, meaning that related modem fax devices could cease functioning.<\/li>\n
  • CVE-2025-59230:<\/b> The vulnerability in Remote Access Connection Manager allows hackers with valid accounts to escalate privileges to the SYSTEM level, the highest level on Windows.<\/li>\n
  • CVE-2025-47827:<\/b> The Secure Boot Bypass vulnerability in IGEL OS prior to version 11, allows for bypass of the secure boot authentication mechanism.<\/li>\n
  • CVE-2025-0033:<\/b> AMD EPYC SEV-SNP vulnerability, which risks the cloud computing environment if the attacker controls the hypervisor.<\/li>\n
  • CVE-2025-2884:<\/b> Out-of-Bounds Read vulnerabilities in the TCG TPM 2.0 Reference Implementation, which can lead to information leakage or disruption of services.<\/li>\n<\/ul>\n

    According to Microsoft, these vulnerabilities affected a wide range of versions of Windows and common hardware and software platforms, including hardware components (TPM, modems) that had existed many years before.<\/p>\n

    Most of the zero-days were in the Elevation of Privilege group, accounting for 80 of the 172 breaches. This means that hackers may not need to access the system from outside, as long as an account has been hacked or has previously installed malicious code, then exploit the vulnerability to gain control over the entire system.<\/p>\n

    Particularly dangerous are the group of vulnerabilities related to system drivers, remote connection management and TPM\/Boot, as these are components deep in the operating system core. When exploited, common security solutions such as antivirals or EDRs may be difficult to detect or block in time.<\/p>\n

    The higher the risk in a business environment when many Windows devices are unpatched or still running Windows 10, the operating system that has just officially ended free support. Organizations without tight patch management policies would become attractive targets for APT or ransomware groups.<\/p>\n

    Not only Microsoft, but a number of major tech firms announced security patches in October:<\/p>\n

      \n
    • Adobe patches errors in many popular products.<\/li>\n
    • Cisco patched serious errors in IOS and Unified Communications Manager.<\/li>\n
    • Draytek, Ivanti, Oracle, Redis, SAP, Synacor (Zimbra) also released patches for vulnerabilities being exploited.<\/li>\n<\/ul>\n

      This shows that the cybersecurity picture in October was not just about Microsoft but a high – intensity global cyberattack.<\/p>\n

      In the face of increasing zero – day exploits, cybersecurity experts recommend:<\/p>\n

        \n
      • Update the patch immediately on all Windows systems, especially servers and terminal computers.<\/li>\n
      • Remove or disable old hardware \/ drivers (such as the Agere modem) if they are no longer necessary.<\/li>\n
      • Consider upgrading from Windows 10 to Windows 11 or sign up for an ESU to continue receiving patches.<\/li>\n
      • For the enterprise, implement a centralized patch management policy, prioritizing zero-day vulnerabilities that are potentially exploited.<\/li>\n
      • Close system monitoring, especially for privileges escalation, unusual booting, or TPM\/Secure Boot operations.<\/li>\n<\/ul>\n

        Below is a list of vulnerabilities and systems affected:<\/p>\n

        \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
        \n
        STT\u200b<\/div>\n<\/td>\n
        		\n
        Tag\u200b<\/div>\n<\/td>\n
        		\n
        CVE ID\u200b<\/div>\n<\/td>\n
        		\n
        CVE Title\u200b<\/div>\n<\/td>\n
        		Severity<\/td>\n<\/tr>\n
        1<\/td>\n.NET<\/td>\nCVE-2025-55247<\/a><\/td>\n.NET Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        2<\/td>\n.NET, .NET Framework, Visual Studio<\/td>\nCVE-2025-55248<\/a><\/td>\n.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        3<\/td>\nActive Directory Federation Services<\/td>\nCVE-2025-59258<\/a><\/td>\nWindows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        4<\/td>\nAgere Windows Modem Driver<\/td>\nCVE-2025-24990<\/a><\/td>\nWindows Agere Modem Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        5<\/td>\nAgere Windows Modem Driver<\/td>\nCVE-2025-24052<\/a><\/td>\nWindows Agere Modem Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        6<\/td>\nAMD Restricted Memory Page<\/td>\nCVE-2025-0033<\/a><\/td>\nAMD CVE-2025-0033: RMP Corruption During SNP Initialization<\/td>\nCritical<\/td>\n<\/tr>\n
        7<\/td>\nASP.NET Core<\/td>\nCVE-2025-55315<\/a><\/td>\nASP.NET Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        8<\/td>\nAzure Connected Machine Agent<\/td>\nCVE-2025-47989<\/a><\/td>\nAzure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        9<\/td>\nAzure Connected Machine Agent<\/td>\nCVE-2025-58724<\/a><\/td>\nArc Enabled Servers \u2013 Azure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        10<\/td>\nAzure Entra ID<\/td>\nCVE-2025-59218<\/a><\/td>\nAzure Entra ID Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        11<\/td>\nAzure Entra ID<\/td>\nCVE-2025-59246<\/a><\/td>\nAzure Entra ID Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        12<\/td>\nAzure Local<\/td>\nCVE-2025-55697<\/a><\/td>\nAzure Local Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        13<\/td>\nAzure Monitor<\/td>\nCVE-2025-55321<\/a><\/td>\nAzure Monitor Log Analytics Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        14<\/td>\nAzure Monitor Agent<\/td>\nCVE-2025-59285<\/a><\/td>\nAzure Monitor Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        15<\/td>\nAzure Monitor Agent<\/td>\nCVE-2025-59494<\/a><\/td>\nAzure Monitor Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        16<\/td>\nAzure PlayFab<\/td>\nCVE-2025-59247<\/a><\/td>\nAzure PlayFab Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        17<\/td>\nConfidential Azure Container Instances<\/td>\nCVE-2025-59292<\/a><\/td>\nAzure Compute Gallery Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        18<\/td>\nConfidential Azure Container Instances<\/td>\nCVE-2025-59291<\/a><\/td>\nConfidential Azure Container Instances Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        19<\/td>\nConnected Devices Platform Service (Cdpsvc)<\/td>\nCVE-2025-59191<\/a><\/td>\nWindows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        20<\/td>\nConnected Devices Platform Service (Cdpsvc)<\/td>\nCVE-2025-55326<\/a><\/td>\nWindows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        21<\/td>\nConnected Devices Platform Service (Cdpsvc)<\/td>\nCVE-2025-58719<\/a><\/td>\nWindows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        22<\/td>\nCopilot<\/td>\nCVE-2025-59272<\/a><\/td>\nCopilot Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        23<\/td>\nCopilot<\/td>\nCVE-2025-59252<\/a><\/td>\nM365 Copilot Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        24<\/td>\nCopilot<\/td>\nCVE-2025-59286<\/a><\/td>\nCopilot Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        25<\/td>\nData Sharing Service Client<\/td>\nCVE-2025-59200<\/a><\/td>\nData Sharing Service Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        26<\/td>\nGames<\/td>\nCVE-2025-59489<\/a><\/td>\nMITRE: CVE-2025-59489 Unity Gaming Engine Editor vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        27<\/td>\nGitHub<\/td>\nCVE-2025-59288<\/a><\/td>\nPlaywright Spoofing Vulnerability<\/td>\nMedium<\/td>\n<\/tr>\n
        28<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58735<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        29<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58732<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        30<\/td>\nInbox COM Objects<\/td>\nCVE-2025-59282<\/a><\/td>\nInternet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        31<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58733<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        32<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58734<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        33<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58738<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        34<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58731<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        35<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58730<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        36<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58736<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        37<\/td>\nInternet Explorer<\/td>\nCVE-2025-59295<\/a><\/td>\nWindows URL Parsing Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        38<\/td>\nJDBC Driver for SQL Server<\/td>\nCVE-2025-59250<\/a><\/td>\nJDBC Driver for SQL Server Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        39<\/td>\nMariner<\/td>\nCVE-2025-39943<\/a><\/td>\nksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer<\/td>\nCritical<\/td>\n<\/tr>\n
        40<\/td>\nMariner<\/td>\nCVE-2025-39946<\/a><\/td>\ntls: make sure to abort the stream if headers are bogus<\/td>\nMedium<\/td>\n<\/tr>\n
        41<\/td>\nMariner<\/td>\nCVE-2025-39942<\/a><\/td>\nksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size<\/td>\nMedium<\/td>\n<\/tr>\n
        42<\/td>\nMariner<\/td>\nCVE-2025-39951<\/a><\/td>\num: virtio_uml: Fix use-after-free after put_device in probe<\/td>\nMedium<\/td>\n<\/tr>\n
        43<\/td>\nMariner<\/td>\nCVE-2025-39932<\/a><\/td>\nsmb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)<\/td>\nMedium<\/td>\n<\/tr>\n
        44<\/td>\nMariner<\/td>\nCVE-2025-39949<\/a><\/td>\nqed: Don\u2019t collect too many protection override GRC elements<\/td>\nMedium<\/td>\n<\/tr>\n
        45<\/td>\nMariner<\/td>\nCVE-2025-39937<\/a><\/td>\nnet: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer<\/td>\nMedium<\/td>\n<\/tr>\n
        46<\/td>\nMariner<\/td>\nCVE-2025-39955<\/a><\/td>\ntcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().<\/td>\nMedium<\/td>\n<\/tr>\n
        47<\/td>\nMariner<\/td>\nCVE-2025-39895<\/a><\/td>\nsched: Fix sched_numa_find_nth_cpu() if mask offline<\/td>\nMedium<\/td>\n<\/tr>\n
        48<\/td>\nMariner<\/td>\nCVE-2025-11413<\/a><\/td>\nGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds<\/td>\nMedium<\/td>\n<\/tr>\n
        49<\/td>\nMariner<\/td>\nCVE-2025-11414<\/a><\/td>\nGNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds<\/td>\nMedium<\/td>\n<\/tr>\n
        50<\/td>\nMariner<\/td>\nCVE-2025-39938<\/a><\/td>\nASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed<\/td>\nMedium<\/td>\n<\/tr>\n
        51<\/td>\nMariner<\/td>\nCVE-2025-11495<\/a><\/td>\nGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow<\/td>\nMedium<\/td>\n<\/tr>\n
        52<\/td>\nMariner<\/td>\nCVE-2025-39934<\/a><\/td>\ndrm: bridge: anx7625: Fix NULL pointer dereference with early IRQ<\/td>\nMedium<\/td>\n<\/tr>\n
        53<\/td>\nMariner<\/td>\nCVE-2025-39929<\/a><\/td>\nsmb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path<\/td>\nMedium<\/td>\n<\/tr>\n
        54<\/td>\nMariner<\/td>\nCVE-2025-39945<\/a><\/td>\ncnic: Fix use-after-free bugs in cnic_delete_task<\/td>\nImportant<\/td>\n<\/tr>\n
        55<\/td>\nMariner<\/td>\nCVE-2025-39907<\/a><\/td>\nmtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer<\/td>\nCritical<\/td>\n<\/tr>\n
        56<\/td>\nMariner<\/td>\nCVE-2025-39913<\/a><\/td>\ntcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.<\/td>\nMedium<\/td>\n<\/tr>\n
        57<\/td>\nMariner<\/td>\nCVE-2025-39952<\/a><\/td>\nwifi: wilc1000: avoid buffer overflow in WID string configuration<\/td>\nImportant<\/td>\n<\/tr>\n
        58<\/td>\nMariner<\/td>\nCVE-2025-39940<\/a><\/td>\ndm-stripe: fix a possible integer overflow<\/td>\nMedium<\/td>\n<\/tr>\n
        59<\/td>\nMariner<\/td>\nCVE-2025-39953<\/a><\/td>\ncgroup: split cgroup_destroy_wq into 3 workqueues<\/td>\nMedium<\/td>\n<\/tr>\n
        60<\/td>\nMariner<\/td>\nCVE-2023-53469<\/a><\/td>\naf_unix: Fix null-ptr-deref in unix_stream_sendpage().<\/td>\nImportant<\/td>\n<\/tr>\n
        61<\/td>\nMariner<\/td>\nCVE-2025-39914<\/a><\/td>\ntracing: Silence warning when chunk allocation fails in trace_pid_write<\/td>\nMedium<\/td>\n<\/tr>\n
        62<\/td>\nMariner<\/td>\nCVE-2025-39905<\/a><\/td>\nnet: phylink: add lock for serializing concurrent pl->phydev writes with resolver<\/td>\nMedium<\/td>\n<\/tr>\n
        63<\/td>\nMariner<\/td>\nCVE-2025-39920<\/a><\/td>\npcmcia: Add error handling for add_interval() in do_validate_mem()<\/td>\nMedium<\/td>\n<\/tr>\n
        64<\/td>\nMariner<\/td>\nCVE-2025-39911<\/a><\/td>\ni40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path<\/td>\nLow<\/td>\n<\/tr>\n
        65<\/td>\nMariner<\/td>\nCVE-2025-39958<\/a><\/td>\niommu\/s390: Make attach succeed when the device was surprise removed<\/td>\nLow<\/td>\n<\/tr>\n
        66<\/td>\nMariner<\/td>\nCVE-2025-8291<\/a><\/td>\nZIP64 End of Central Directory (EOCD) Locator record offset not checked<\/td>\nMedium<\/td>\n<\/tr>\n
        67<\/td>\nMariner<\/td>\nCVE-2025-39957<\/a><\/td>\nwifi: mac80211: increase scan_ies_len for S1G<\/td>\nLow<\/td>\n<\/tr>\n
        68<\/td>\nMariner<\/td>\nCVE-2025-46818<\/a><\/td>\nRedis: Authenticated users can execute LUA scripts as a different user<\/td>\nMedium<\/td>\n<\/tr>\n
        69<\/td>\nMariner<\/td>\nCVE-2025-46817<\/a><\/td>\nLua library commands may lead to integer overflow and potential RCE<\/td>\nImportant<\/td>\n<\/tr>\n
        70<\/td>\nMariner<\/td>\nCVE-2022-50502<\/a><\/td>\nmm: \/proc\/pid\/smaps_rollup: fix no vma\u2019s null-deref<\/td>\nMedium<\/td>\n<\/tr>\n
        71<\/td>\nMariner<\/td>\nCVE-2025-39944<\/a><\/td>\nocteontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()<\/td>\nImportant<\/td>\n<\/tr>\n
        72<\/td>\nMariner<\/td>\nCVE-2025-11234<\/a><\/td>\nQemu-kvm: vnc websocket handshake use-after-free<\/td>\nMedium<\/td>\n<\/tr>\n
        73<\/td>\nMariner<\/td>\nCVE-2025-49844<\/a><\/td>\nRedis Lua Use-After-Free may lead to remote code execution<\/td>\nCritical<\/td>\n<\/tr>\n
        74<\/td>\nMariner<\/td>\nCVE-2025-10729<\/a><\/td>\nUse-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG<\/td>\nImportant<\/td>\n<\/tr>\n
        75<\/td>\nMariner<\/td>\nCVE-2025-39961<\/a><\/td>\niommu\/amd\/pgtbl: Fix possible race while increase page table level<\/td>\nMedium<\/td>\n<\/tr>\n
        76<\/td>\nMariner<\/td>\nCVE-2025-61984<\/a><\/td>\nssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)<\/td>\nLow<\/td>\n<\/tr>\n
        77<\/td>\nMariner<\/td>\nCVE-2025-46819<\/a><\/td>\nRedis is vulnerable to DoS via specially crafted LUA scripts<\/td>\nMedium<\/td>\n<\/tr>\n
        78<\/td>\nMariner<\/td>\nCVE-2025-37727<\/a><\/td>\nElasticsearch Insertion of sensitive information in log file<\/td>\nMedium<\/td>\n<\/tr>\n
        79<\/td>\nMariner<\/td>\nCVE-2025-11412<\/a><\/td>\nGNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds<\/td>\nMedium<\/td>\n<\/tr>\n
        80<\/td>\nMariner<\/td>\nCVE-2025-39931<\/a><\/td>\ncrypto: af_alg \u2013 Set merge to zero early in af_alg_sendmsg<\/td>\nMedium<\/td>\n<\/tr>\n
        81<\/td>\nMariner<\/td>\nCVE-2025-39933<\/a><\/td>\nsmb: client: let recv_done verify data_offset, data_length and remaining_data_length<\/td>\nMedium<\/td>\n<\/tr>\n
        82<\/td>\nMariner<\/td>\nCVE-2025-39947<\/a><\/td>\nnet\/mlx5e: Harden uplink netdev access against device unbind<\/td>\nMedium<\/td>\n<\/tr>\n
        83<\/td>\nMariner<\/td>\nCVE-2025-61985<\/a><\/td>\nssh in OpenSSH before 10.1 allows the \u2018\\0\u2019 character in an ssh:\/\/ URI, potentially leading to code execution when a ProxyCommand is used.<\/td>\nLow<\/td>\n<\/tr>\n
        84<\/td>\nMariner<\/td>\nCVE-2025-10728<\/a><\/td>\nUncontrolled recursion in Qt SVG module<\/td>\nImportant<\/td>\n<\/tr>\n
        85<\/td>\nMariner<\/td>\nCVE-2025-39916<\/a><\/td>\nmm\/damon\/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()<\/td>\nMedium<\/td>\n<\/tr>\n
        86<\/td>\nMariner<\/td>\nCVE-2025-39902<\/a><\/td>\nmm\/slub: avoid accessing metadata when pointer is invalid in object_err()<\/td>\nMedium<\/td>\n<\/tr>\n
        87<\/td>\nMariner<\/td>\nCVE-2025-39923<\/a><\/td>\ndmaengine: qcom: bam_dma: Fix DT error handling for num-channels\/ees<\/td>\nMedium<\/td>\n<\/tr>\n
        88<\/td>\nMariner<\/td>\nCVE-2025-39898<\/a><\/td>\ne1000e: fix heap overflow in e1000_set_eeprom<\/td>\nCritical<\/td>\n<\/tr>\n
        89<\/td>\nMariner<\/td>\nCVE-2025-39925<\/a><\/td>\ncan: j1939: implement NETDEV_UNREGISTER notification handler<\/td>\nCritical<\/td>\n<\/tr>\n
        90<\/td>\nMariner<\/td>\nCVE-2025-39891<\/a><\/td>\nwifi: mwifiex: Initialize the chan_stats array to zero<\/td>\nMedium<\/td>\n<\/tr>\n
        91<\/td>\nMariner<\/td>\nCVE-2025-39927<\/a><\/td>\nceph: fix race condition validating r_parent before applying state<\/td>\nMedium<\/td>\n<\/tr>\n
        92<\/td>\nMariner<\/td>\nCVE-2025-39901<\/a><\/td>\ni40e: remove read access to debugfs files<\/td>\nImportant<\/td>\n<\/tr>\n
        93<\/td>\nMariner<\/td>\nCVE-2025-39910<\/a><\/td>\nmm\/vmalloc, mm\/kasan: respect gfp mask in kasan_populate_vmalloc()<\/td>\nCritical<\/td>\n<\/tr>\n
        94<\/td>\nMariner<\/td>\nCVE-2025-39909<\/a><\/td>\nmm\/damon\/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()<\/td>\nMedium<\/td>\n<\/tr>\n
        95<\/td>\nMicrosoft Brokering File System<\/td>\nCVE-2025-48004<\/a><\/td>\nMicrosoft Brokering File System Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        96<\/td>\nMicrosoft Brokering File System<\/td>\nCVE-2025-59189<\/a><\/td>\nMicrosoft Brokering File System Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        97<\/td>\nMicrosoft Configuration Manager<\/td>\nCVE-2025-55320<\/a><\/td>\nConfiguration Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        98<\/td>\nMicrosoft Configuration Manager<\/td>\nCVE-2025-59213<\/a><\/td>\nConfiguration Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        99<\/td>\nMicrosoft Defender for Linux<\/td>\nCVE-2025-59497<\/a><\/td>\nMicrosoft Defender for Linux Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        100<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11213<\/a><\/td>\nChromium: CVE-2025-11213 Inappropriate implementation in Omnibox<\/td>\nUnknown<\/td>\n<\/tr>\n
        101<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11210<\/a><\/td>\nChromium: CVE-2025-11210 Side-channel information leakage in Tab<\/td>\nUnknown<\/td>\n<\/tr>\n
        102<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11460<\/a><\/td>\nChromium: CVE-2025-11460 Use after free in Storage<\/td>\nUnknown<\/td>\n<\/tr>\n
        103<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11458<\/a><\/td>\nChromium: CVE-2025-11458 Heap buffer overflow in Sync<\/td>\nUnknown<\/td>\n<\/tr>\n
        104<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11215<\/a><\/td>\nChromium: CVE-2025-11215 Off by one error in V8<\/td>\nUnknown<\/td>\n<\/tr>\n
        105<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11216<\/a><\/td>\nChromium: CVE-2025-11216 Inappropriate implementation in Storage<\/td>\nUnknown<\/td>\n<\/tr>\n
        106<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11208<\/a><\/td>\nChromium: CVE-2025-11208 Inappropriate implementation in Media<\/td>\nUnknown<\/td>\n<\/tr>\n
        107<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11212<\/a><\/td>\nChromium: CVE-2025-11212 Inappropriate implementation in Media<\/td>\nUnknown<\/td>\n<\/tr>\n
        108<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11211<\/a><\/td>\nChromium: CVE-2025-11211 Out of bounds read in Media<\/td>\nUnknown<\/td>\n<\/tr>\n
        109<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11205<\/a><\/td>\nChromium: CVE-2025-11205 Heap buffer overflow in WebGPU<\/td>\nUnknown<\/td>\n<\/tr>\n
        110<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11207<\/a><\/td>\nChromium: CVE-2025-11207 Side-channel information leakage in Storage<\/td>\nUnknown<\/td>\n<\/tr>\n
        111<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11209<\/a><\/td>\nChromium: CVE-2025-11209 Inappropriate implementation in Omnibox<\/td>\nUnknown<\/td>\n<\/tr>\n
        112<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11206<\/a><\/td>\nChromium: CVE-2025-11206 Heap buffer overflow in Video<\/td>\nUnknown<\/td>\n<\/tr>\n
        113<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11219<\/a><\/td>\nChromium: CVE-2025-11219 Use after free in V8<\/td>\nUnknown<\/td>\n<\/tr>\n
        114<\/td>\nMicrosoft Exchange Server<\/td>\nCVE-2025-59248<\/a><\/td>\nMicrosoft Exchange Server Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        115<\/td>\nMicrosoft Exchange Server<\/td>\nCVE-2025-59249<\/a><\/td>\nMicrosoft Exchange Server Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        116<\/td>\nMicrosoft Exchange Server<\/td>\nCVE-2025-53782<\/a><\/td>\nMicrosoft Exchange Server Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        117<\/td>\nMicrosoft Failover Cluster Virtual Driver<\/td>\nCVE-2025-59260<\/a><\/td>\nMicrosoft Failover Cluster Virtual Driver Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        118<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-59195<\/a><\/td>\nMicrosoft Graphics Component Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        119<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2016-9535<\/a><\/td>\nMITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        120<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-59261<\/a><\/td>\nWindows Graphics Component Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        121<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-49708<\/a><\/td>\nMicrosoft Graphics Component Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        122<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-59205<\/a><\/td>\nWindows Graphics Component Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        123<\/td>\nMicrosoft Office<\/td>\nCVE-2025-59229<\/a><\/td>\nMicrosoft Office Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        124<\/td>\nMicrosoft Office<\/td>\nCVE-2025-59227<\/a><\/td>\nMicrosoft Office Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        125<\/td>\nMicrosoft Office<\/td>\nCVE-2025-59234<\/a><\/td>\nMicrosoft Office Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        126<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59223<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        127<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59224<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        128<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59225<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        129<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59232<\/a><\/td>\nMicrosoft Excel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        130<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59235<\/a><\/td>\nMicrosoft Excel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        131<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59233<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        132<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59231<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        133<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59236<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        134<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59243<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        135<\/td>\nMicrosoft Office PowerPoint<\/td>\nCVE-2025-59238<\/a><\/td>\nMicrosoft PowerPoint Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        136<\/td>\nMicrosoft Office SharePoint<\/td>\nCVE-2025-59237<\/a><\/td>\nMicrosoft SharePoint Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        137<\/td>\nMicrosoft Office SharePoint<\/td>\nCVE-2025-59228<\/a><\/td>\nMicrosoft SharePoint Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        138<\/td>\nMicrosoft Office Visio<\/td>\nCVE-2025-59226<\/a><\/td>\nMicrosoft Office Visio Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        139<\/td>\nMicrosoft Office Word<\/td>\nCVE-2025-59222<\/a><\/td>\nMicrosoft Word Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        140<\/td>\nMicrosoft Office Word<\/td>\nCVE-2025-59221<\/a><\/td>\nMicrosoft Word Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        141<\/td>\nMicrosoft PowerShell<\/td>\nCVE-2025-25004<\/a><\/td>\nPowerShell Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        142<\/td>\nMicrosoft Windows<\/td>\nCVE-2025-55701<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        143<\/td>\nMicrosoft Windows Codecs Library<\/td>\nCVE-2025-54957<\/a><\/td>\nMITRE CVE-2025-54957: Integer overflow in Dolby Digital Plus audio decoder<\/td>\nImportant<\/td>\n<\/tr>\n
        144<\/td>\nMicrosoft Windows Search Component<\/td>\nCVE-2025-59198<\/a><\/td>\nWindows Search Service Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        145<\/td>\nMicrosoft Windows Search Component<\/td>\nCVE-2025-59190<\/a><\/td>\nWindows Search Service Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        146<\/td>\nMicrosoft Windows Search Component<\/td>\nCVE-2025-59253<\/a><\/td>\nWindows Search Service Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        147<\/td>\nMicrosoft Windows Speech<\/td>\nCVE-2025-58715<\/a><\/td>\nWindows Speech Runtime Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        148<\/td>\nMicrosoft Windows Speech<\/td>\nCVE-2025-58716<\/a><\/td>\nWindows Speech Runtime Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        149<\/td>\nNetwork Connection Status Indicator (NCSI)<\/td>\nCVE-2025-59201<\/a><\/td>\nNetwork Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        150<\/td>\nNtQueryInformation Token function (ntifs.h)<\/td>\nCVE-2025-55696<\/a><\/td>\nNtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        151<\/td>\nRedis Enterprise<\/td>\nCVE-2025-59271<\/a><\/td>\nRedis Enterprise Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        152<\/td>\nRemote Desktop Client<\/td>\nCVE-2025-58718<\/a><\/td>\nRemote Desktop Client Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        153<\/td>\nSoftware Protection Platform (SPP)<\/td>\nCVE-2025-59199<\/a><\/td>\nSoftware Protection Platform (SPP) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        154<\/td>\nStorport.sys Driver<\/td>\nCVE-2025-59192<\/a><\/td>\nStorport.sys Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        155<\/td>\nTCG TPM2.0<\/td>\nCVE-2025-2884<\/a><\/td>\nCert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation<\/td>\nImportant<\/td>\n<\/tr>\n
        156<\/td>\nVirtual Secure Mode<\/td>\nCVE-2025-48813<\/a><\/td>\nVirtual Secure Mode Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        157<\/td>\nVisual Studio<\/td>\nCVE-2025-55240<\/a><\/td>\nVisual Studio Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        158<\/td>\nVisual Studio<\/td>\nCVE-2025-54132<\/a><\/td>\nGitHub CVE-2025-54132: Arbitrary Image Fetch in Mermaid Diagram Tool<\/td>\nImportant<\/td>\n<\/tr>\n
        159<\/td>\nWindows Ancillary Function Driver for WinSock<\/td>\nCVE-2025-58714<\/a><\/td>\nWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        160<\/td>\nWindows Ancillary Function Driver for WinSock<\/td>\nCVE-2025-59242<\/a><\/td>\nWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        161<\/td>\nWindows Authentication Methods<\/td>\nCVE-2025-59277<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        162<\/td>\nWindows Authentication Methods<\/td>\nCVE-2025-59278<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        163<\/td>\nWindows Authentication Methods<\/td>\nCVE-2025-59275<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        164<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55337<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        165<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55332<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        166<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55333<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        167<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55330<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        168<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55338<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        169<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55682<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        170<\/td>\nWindows Bluetooth Service<\/td>\nCVE-2025-59290<\/a><\/td>\nWindows Bluetooth Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        171<\/td>\nWindows Bluetooth Service<\/td>\nCVE-2025-58728<\/a><\/td>\nWindows Bluetooth Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        172<\/td>\nWindows Bluetooth Service<\/td>\nCVE-2025-59289<\/a><\/td>\nWindows Bluetooth Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        173<\/td>\nWindows Cloud Files Mini Filter Driver<\/td>\nCVE-2025-55680<\/a><\/td>\nWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        174<\/td>\nWindows Cloud Files Mini Filter Driver<\/td>\nCVE-2025-55336<\/a><\/td>\nWindows Cloud Files Mini Filter Driver Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        175<\/td>\nWindows COM<\/td>\nCVE-2025-58725<\/a><\/td>\nWindows COM+ Event System Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        176<\/td>\nWindows Connected Devices Platform Service<\/td>\nCVE-2025-58727<\/a><\/td>\nWindows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        177<\/td>\nWindows Core Shell<\/td>\nCVE-2025-59185<\/a><\/td>\nNTLM Hash Disclosure Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        178<\/td>\nWindows Core Shell<\/td>\nCVE-2025-59244<\/a><\/td>\nNTLM Hash Disclosure Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        179<\/td>\nWindows Cryptographic Services<\/td>\nCVE-2025-58720<\/a><\/td>\nWindows Cryptographic Services Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        180<\/td>\nWindows Device Association Broker service<\/td>\nCVE-2025-50174<\/a><\/td>\nWindows Device Association Broker Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        181<\/td>\nWindows Device Association Broker service<\/td>\nCVE-2025-55677<\/a><\/td>\nWindows Device Association Broker Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        182<\/td>\nWindows Digital Media<\/td>\nCVE-2025-53150<\/a><\/td>\nWindows Digital Media Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        183<\/td>\nWindows Digital Media<\/td>\nCVE-2025-50175<\/a><\/td>\nWindows Digital Media Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        184<\/td>\nWindows DirectX<\/td>\nCVE-2025-55678<\/a><\/td>\nDirectX Graphics Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        185<\/td>\nWindows DirectX<\/td>\nCVE-2025-55698<\/a><\/td>\nDirectX Graphics Kernel Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        186<\/td>\nWindows DWM<\/td>\nCVE-2025-58722<\/a><\/td>\nMicrosoft DWM Core Library Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        187<\/td>\nWindows DWM<\/td>\nCVE-2025-55681<\/a><\/td>\nDesktop Windows Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        188<\/td>\nWindows DWM Core Library<\/td>\nCVE-2025-59255<\/a><\/td>\nWindows DWM Core Library Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        189<\/td>\nWindows DWM Core Library<\/td>\nCVE-2025-59254<\/a><\/td>\nMicrosoft DWM Core Library Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        190<\/td>\nWindows Error Reporting<\/td>\nCVE-2025-55692<\/a><\/td>\nWindows Error Reporting Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        191<\/td>\nWindows Error Reporting<\/td>\nCVE-2025-55694<\/a><\/td>\nWindows Error Reporting Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        192<\/td>\nWindows ETL Channel<\/td>\nCVE-2025-59197<\/a><\/td>\nWindows ETL Channel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        193<\/td>\nWindows Failover Cluster<\/td>\nCVE-2025-59188<\/a><\/td>\nMicrosoft Failover Cluster Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        194<\/td>\nWindows Failover Cluster<\/td>\nCVE-2025-47979<\/a><\/td>\nMicrosoft Failover Cluster Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        195<\/td>\nWindows File Explorer<\/td>\nCVE-2025-59214<\/a><\/td>\nMicrosoft Windows File Explorer Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        196<\/td>\nWindows File Explorer<\/td>\nCVE-2025-58739<\/a><\/td>\nMicrosoft Windows File Explorer Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        197<\/td>\nWindows Health and Optimized Experiences Service<\/td>\nCVE-2025-59241<\/a><\/td>\nWindows Health and Optimized Experiences Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        198<\/td>\nWindows Hello<\/td>\nCVE-2025-53139<\/a><\/td>\nWindows Hello Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        199<\/td>\nWindows High Availability Services<\/td>\nCVE-2025-59184<\/a><\/td>\nStorage Spaces Direct Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        200<\/td>\nWindows Hyper-V<\/td>\nCVE-2025-55328<\/a><\/td>\nWindows Hyper-V Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        201<\/td>\nWindows Kernel<\/td>\nCVE-2025-55679<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        202<\/td>\nWindows Kernel<\/td>\nCVE-2025-55683<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        203<\/td>\nWindows Kernel<\/td>\nCVE-2025-59207<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        204<\/td>\nWindows Kernel<\/td>\nCVE-2025-55334<\/a><\/td>\nWindows Kernel Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        205<\/td>\nWindows Kernel<\/td>\nCVE-2025-59186<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        206<\/td>\nWindows Kernel<\/td>\nCVE-2025-55693<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        207<\/td>\nWindows Kernel<\/td>\nCVE-2025-59194<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        208<\/td>\nWindows Kernel<\/td>\nCVE-2025-59187<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        209<\/td>\nWindows Kernel<\/td>\nCVE-2025-50152<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        210<\/td>\nWindows Kernel<\/td>\nCVE-2025-55699<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        211<\/td>\nWindows Local Session Manager (LSM)<\/td>\nCVE-2025-58729<\/a><\/td>\nWindows Local Session Manager (LSM) Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        212<\/td>\nWindows Local Session Manager (LSM)<\/td>\nCVE-2025-59257<\/a><\/td>\nWindows Local Session Manager (LSM) Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        213<\/td>\nWindows Local Session Manager (LSM)<\/td>\nCVE-2025-59259<\/a><\/td>\nWindows Local Session Manager (LSM) Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        214<\/td>\nWindows Management Services<\/td>\nCVE-2025-59193<\/a><\/td>\nWindows Management Services Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        215<\/td>\nWindows Management Services<\/td>\nCVE-2025-59204<\/a><\/td>\nWindows Management Services Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        216<\/td>\nWindows MapUrlToZone<\/td>\nCVE-2025-59208<\/a><\/td>\nWindows MapUrlToZone Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        217<\/td>\nWindows NDIS<\/td>\nCVE-2025-55339<\/a><\/td>\nWindows Network Driver Interface Specification Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        218<\/td>\nWindows NTFS<\/td>\nCVE-2025-55335<\/a><\/td>\nWindows NTFS Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        219<\/td>\nWindows NTLM<\/td>\nCVE-2025-59284<\/a><\/td>\nWindows NTLM Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        220<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55331<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        221<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55689<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        222<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55685<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        223<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55686<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        224<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55690<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        225<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55684<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        226<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55688<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        227<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55691<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        228<\/td>\nWindows Push Notification Core<\/td>\nCVE-2025-59209<\/a><\/td>\nWindows Push Notification Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        229<\/td>\nWindows Push Notification Core<\/td>\nCVE-2025-59211<\/a><\/td>\nWindows Push Notification Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        230<\/td>\nWindows Remote Access Connection Manager<\/td>\nCVE-2025-59230<\/a><\/td>\nWindows Remote Access Connection Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        231<\/td>\nWindows Remote Desktop<\/td>\nCVE-2025-58737<\/a><\/td>\nRemote Desktop Protocol Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        232<\/td>\nWindows Remote Desktop Protocol<\/td>\nCVE-2025-55340<\/a><\/td>\nWindows Remote Desktop Protocol Security Feature Bypass<\/td>\nImportant<\/td>\n<\/tr>\n
        233<\/td>\nWindows Remote Desktop Services<\/td>\nCVE-2025-59202<\/a><\/td>\nWindows Remote Desktop Services Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        234<\/td>\nWindows Remote Procedure Call<\/td>\nCVE-2025-59502<\/a><\/td>\nRemote Procedure Call Denial of Service Vulnerability<\/td>\nMedium<\/td>\n<\/tr>\n
        235<\/td>\nWindows Resilient File System (ReFS)<\/td>\nCVE-2025-55687<\/a><\/td>\nWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        236<\/td>\nWindows Resilient File System (ReFS) Deduplication Service<\/td>\nCVE-2025-59210<\/a><\/td>\nWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        237<\/td>\nWindows Resilient File System (ReFS) Deduplication Service<\/td>\nCVE-2025-59206<\/a><\/td>\nWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        238<\/td>\nWindows Routing and Remote Access Service (RRAS)<\/td>\nCVE-2025-58717<\/a><\/td>\nWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        239<\/td>\nWindows Routing and Remote Access Service (RRAS)<\/td>\nCVE-2025-55700<\/a><\/td>\nWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        240<\/td>\nWindows Secure Boot<\/td>\nCVE-2025-47827<\/a><\/td>\nMITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11<\/td>\nImportant<\/td>\n<\/tr>\n
        241<\/td>\nWindows Server Update Service<\/td>\nCVE-2025-59287<\/a><\/td>\nWindows Server Update Service (WSUS) Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        242<\/td>\nWindows SMB Client<\/td>\nCVE-2025-59280<\/a><\/td>\nWindows SMB Client Tampering Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        243<\/td>\nWindows SMB Server<\/td>\nCVE-2025-58726<\/a><\/td>\nWindows SMB Server Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        244<\/td>\nWindows SSDP Service<\/td>\nCVE-2025-59196<\/a><\/td>\nWindows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        245<\/td>\nWindows StateRepository API<\/td>\nCVE-2025-59203<\/a><\/td>\nWindows State Repository API Server File Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        246<\/td>\nWindows Storage Management Provider<\/td>\nCVE-2025-55325<\/a><\/td>\nWindows Storage Management Provider Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        247<\/td>\nWindows Taskbar Live<\/td>\nCVE-2025-59294<\/a><\/td>\nWindows Taskbar Live Preview Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        248<\/td>\nWindows USB Video Driver<\/td>\nCVE-2025-55676<\/a><\/td>\nWindows USB Video Class System Driver Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        249<\/td>\nWindows Virtualization-Based Security (VBS) Enclave<\/td>\nCVE-2025-53717<\/a><\/td>\nWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        250<\/td>\nWindows WLAN Auto Config Service<\/td>\nCVE-2025-55695<\/a><\/td>\nWindows WLAN AutoConfig Service Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        251<\/td>\nXbox<\/td>\nCVE-2025-53768<\/a><\/td>\nXbox IStorageService Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        252<\/td>\nXBox Gaming Services<\/td>\nCVE-2025-59281<\/a><\/td>\nXbox Gaming Services Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
        WhiteHat<\/i><\/b>\u200b<\/div>\n
        Theo: https:\/\/whitehat.vn\/threads\/microsoft-patch-tuesday-thang-10-2025-va-172-lo-hong-6-zero-day.18838\/<\/a><\/i><\/div>\n","protected":false},"excerpt":{"rendered":"

        Microsoft has released a recurring security update, the October Patch Tuesday, with 172 security vulnerabilities patched, including six zero-day vulnerabilities actively exploited by hackers. This was also a special milestone as Windows 10 officially ended its free support life, making this patch the “last shield” for this popular operating system if users did not register […]<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[351],"tags":[],"class_list":["post-11355","post","type-post","status-publish","format-standard","hentry","category-news-announcements"],"_links":{"self":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/11355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/comments?post=11355"}],"version-history":[{"count":1,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/11355\/revisions"}],"predecessor-version":[{"id":11356,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/11355\/revisions\/11356"}],"wp:attachment":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/media?parent=11355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/categories?post=11355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/tags?post=11355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}