Vulnerability (CVE)
Microsoft's September Patch Tuesday addressed 80 vulnerabilities, eight rated Critical and 72 Important, with none exploited in the wild as a zero-day and 38 of them privilege escalation flaws. The publicly known bug is CVE-2025-55234 (CVSS 8.8), an SMB...
Microsoft released out-of-band updates for CVE-2025-59287, a critical-severity (CVSS 9.8) remote code execution flaw in Windows Server Update Service that was originally fixed in the prior week's Patch Tuesday and has since come under active exploitation....
Microsoft's September 2025 security update covers 86 vulnerabilities, none of which Microsoft observed being exploited in the wild, though it assessed exploitation as likely for eight, including one remote code execution flaw, CVE-2025-54916, a...
Microsoft released security updates addressing more than 80 vulnerabilities in Windows and its software, including 13 rated critical, with no known zero-day or actively exploited flaws in this month's bundle. Among the critical fixes are CVE-2025-54918, an...