Microsoft Patch Tuesday for October 2025 — Snort rules and prominent vulnerabilities
Summary: Microsoft's October 2025 security update addresses 175 Microsoft CVEs and 21 non-Microsoft CVEs, including 17 rated critical and 11 flagged as more likely to be exploited. Three of the important vulnerabilities were confirmed exploited in the wild: a flaw in the third-party Agere Modem driver that Microsoft permanently removed in the cumulative update, an improper access-control check in Windows Remote Access Connection Manager, and a Secure Boot bypass in IGEL OS before version 11.
Key Takeaway: Three of this month's flaws were already being exploited before patches shipped, and one of them - the Agere Modem driver - was removed outright, leaving anyone still running fax modem hardware on unsupported components.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026