# KB5066586: October 2025 cumulative update for Windows 10 1809 KB5066586, released October 14, 2025, fixes 98 CVEs across 4 products. 3 of them are being exploited (CVE-2025-24990); 3 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5066586 - Platform: Microsoft - Released: Oct 14, 2025 - Priority: Patch now (Closes CVE-2025-24990, exploited (CISA KEV)) - CVEs: 98, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://support.microsoft.com/help/5066586 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 10 Version 1809 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1809-for-32-bit-systems.md) | | 17763.7919 | | [Windows 10 Version 1809 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1809-for-x64-based-systems.md) | | 17763.7919 | | [Windows Server 2019](https://patchblox.com/security/data/product/microsoft/windows-server-2019.md) | | 17763.7919 | | [Windows Server 2019 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2019-server-core-installation.md) | | 17763.7919 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-24990](https://patchblox.com/security/data/cve/CVE-2025-24990.md) | Patch now | Agere Windows Modem Driver | 7.8 | 0.0651 | CISA KEV | | [CVE-2025-47827](https://patchblox.com/security/data/cve/CVE-2025-47827.md) | Patch now | Windows Secure Boot | 4.6 | 0.0515 | CISA KEV | | [CVE-2025-59230](https://patchblox.com/security/data/cve/CVE-2025-59230.md) | Patch now | Windows Remote Access Connection Manager | 7.8 | 0.0272 | CISA KEV | | [CVE-2025-55681](https://patchblox.com/security/data/cve/CVE-2025-55681.md) | Urgent | Windows DWM | 7.0 | 0.0550 | More likely | | [CVE-2016-9535](https://patchblox.com/security/data/cve/CVE-2016-9535.md) | Urgent | Microsoft Graphics Component | 4.0 | 0.0473 | | | [CVE-2025-59199](https://patchblox.com/security/data/cve/CVE-2025-59199.md) | Urgent | Software Protection Platform (SPP) | 7.8 | 0.0455 | More likely | | [CVE-2025-55692](https://patchblox.com/security/data/cve/CVE-2025-55692.md) | Urgent | Windows Error Reporting | 7.8 | 0.0363 | More likely | | [CVE-2025-24052](https://patchblox.com/security/data/cve/CVE-2025-24052.md) | Urgent | Agere Windows Modem Driver | 7.8 | 0.0254 | Disclosed | | [CVE-2025-58722](https://patchblox.com/security/data/cve/CVE-2025-58722.md) | Urgent | Windows DWM | 7.8 | 0.0234 | More likely | | [CVE-2025-49708](https://patchblox.com/security/data/cve/CVE-2025-49708.md) | Urgent | Microsoft Graphics Component | 9.9 | 0.0126 | | | [CVE-2025-55680](https://patchblox.com/security/data/cve/CVE-2025-55680.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0044 | More likely | | [CVE-2025-59295](https://patchblox.com/security/data/cve/CVE-2025-59295.md) | High | Internet Explorer | 8.8 | 0.0190 | | | [CVE-2025-54957](https://patchblox.com/security/data/cve/CVE-2025-54957.md) | High | Microsoft Windows Codecs Library | 7.0 | 0.0160 | | | [CVE-2025-59254](https://patchblox.com/security/data/cve/CVE-2025-59254.md) | High | Windows DWM Core Library | 7.8 | 0.0114 | | | [CVE-2025-58726](https://patchblox.com/security/data/cve/CVE-2025-58726.md) | High | Windows SMB Server | 7.5 | 0.0104 | | | [CVE-2025-55326](https://patchblox.com/security/data/cve/CVE-2025-55326.md) | High | Connected Devices Platform Service (Cdpsvc) | 7.5 | 0.0084 | | | [CVE-2025-59200](https://patchblox.com/security/data/cve/CVE-2025-59200.md) | High | Data Sharing Service Client | 7.7 | 0.0081 | | | [CVE-2025-59282](https://patchblox.com/security/data/cve/CVE-2025-59282.md) | High | Inbox COM Objects | 7.0 | 0.0061 | | | [CVE-2025-58718](https://patchblox.com/security/data/cve/CVE-2025-58718.md) | High | Remote Desktop Client | 8.8 | 0.0060 | | | [CVE-2025-59208](https://patchblox.com/security/data/cve/CVE-2025-59208.md) | High | Windows MapUrlToZone | 7.1 | 0.0050 | | | [CVE-2025-25004](https://patchblox.com/security/data/cve/CVE-2025-25004.md) | High | Microsoft PowerShell | 7.3 | 0.0049 | | | [CVE-2025-58732](https://patchblox.com/security/data/cve/CVE-2025-58732.md) | High | Inbox COM Objects | 7.0 | 0.0047 | | | [CVE-2025-58735](https://patchblox.com/security/data/cve/CVE-2025-58735.md) | High | Inbox COM Objects | 7.0 | 0.0047 | | | [CVE-2025-59201](https://patchblox.com/security/data/cve/CVE-2025-59201.md) | High | Network Connection Status Indicator (NCSI) | 7.8 | 0.0046 | | | [CVE-2025-64679](https://patchblox.com/security/data/cve/CVE-2025-64679.md) | High | Windows DWM Core Library | 7.8 | 0.0045 | | | [CVE-2025-50152](https://patchblox.com/security/data/cve/CVE-2025-50152.md) | High | Windows Kernel | 7.8 | 0.0043 | | | [CVE-2025-50175](https://patchblox.com/security/data/cve/CVE-2025-50175.md) | High | Windows Digital Media | 7.8 | 0.0043 | | | [CVE-2025-58728](https://patchblox.com/security/data/cve/CVE-2025-58728.md) | High | Windows Bluetooth Service | 7.8 | 0.0043 | | | [CVE-2025-59207](https://patchblox.com/security/data/cve/CVE-2025-59207.md) | High | Windows Kernel | 7.8 | 0.0043 | | | [CVE-2025-59255](https://patchblox.com/security/data/cve/CVE-2025-59255.md) | High | Windows DWM Core Library | 7.8 | 0.0043 | | | [CVE-2025-55701](https://patchblox.com/security/data/cve/CVE-2025-55701.md) | High | Microsoft Windows | 7.8 | 0.0041 | | | [CVE-2025-59242](https://patchblox.com/security/data/cve/CVE-2025-59242.md) | High | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0041 | | | [CVE-2025-58715](https://patchblox.com/security/data/cve/CVE-2025-58715.md) | High | Microsoft Windows Speech | 8.8 | 0.0040 | | | [CVE-2025-58716](https://patchblox.com/security/data/cve/CVE-2025-58716.md) | High | Microsoft Windows Speech | 8.8 | 0.0040 | | | [CVE-2025-59277](https://patchblox.com/security/data/cve/CVE-2025-59277.md) | High | Windows Authentication Methods | 7.8 | 0.0039 | | | [CVE-2025-64680](https://patchblox.com/security/data/cve/CVE-2025-64680.md) | High | Windows DWM Core Library | 7.8 | 0.0037 | | | [CVE-2025-58737](https://patchblox.com/security/data/cve/CVE-2025-58737.md) | High | Windows Remote Desktop | 7.0 | 0.0035 | | | [CVE-2025-59202](https://patchblox.com/security/data/cve/CVE-2025-59202.md) | High | Windows Remote Desktop Services | 7.0 | 0.0035 | | | [CVE-2025-58730](https://patchblox.com/security/data/cve/CVE-2025-58730.md) | High | Inbox COM Objects | 7.0 | 0.0035 | | | [CVE-2025-58733](https://patchblox.com/security/data/cve/CVE-2025-58733.md) | High | Inbox COM Objects | 7.0 | 0.0035 | | | [CVE-2025-58734](https://patchblox.com/security/data/cve/CVE-2025-58734.md) | High | Inbox COM Objects | 7.0 | 0.0035 | | | [CVE-2025-58736](https://patchblox.com/security/data/cve/CVE-2025-58736.md) | High | Inbox COM Objects | 7.0 | 0.0035 | | | [CVE-2025-58738](https://patchblox.com/security/data/cve/CVE-2025-58738.md) | High | Inbox COM Objects | 7.0 | 0.0035 | | | [CVE-2025-53150](https://patchblox.com/security/data/cve/CVE-2025-53150.md) | High | Windows Digital Media | 7.8 | 0.0032 | | | [CVE-2025-53768](https://patchblox.com/security/data/cve/CVE-2025-53768.md) | High | Xbox | 7.8 | 0.0032 | | | [CVE-2025-59191](https://patchblox.com/security/data/cve/CVE-2025-59191.md) | High | Connected Devices Platform Service (Cdpsvc) | 7.8 | 0.0032 | | | [CVE-2025-59187](https://patchblox.com/security/data/cve/CVE-2025-59187.md) | High | Windows Kernel | 7.8 | 0.0031 | | | [CVE-2025-59192](https://patchblox.com/security/data/cve/CVE-2025-59192.md) | High | Storport.sys Driver | 7.8 | 0.0030 | | | [CVE-2025-55678](https://patchblox.com/security/data/cve/CVE-2025-55678.md) | High | Windows DirectX | 7.0 | 0.0030 | | | [CVE-2025-59275](https://patchblox.com/security/data/cve/CVE-2025-59275.md) | High | Windows Authentication Methods | 7.8 | 0.0028 | | | [CVE-2025-59278](https://patchblox.com/security/data/cve/CVE-2025-59278.md) | High | Windows Authentication Methods | 7.8 | 0.0028 | | | [CVE-2025-58714](https://patchblox.com/security/data/cve/CVE-2025-58714.md) | High | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0028 | | | [CVE-2025-55328](https://patchblox.com/security/data/cve/CVE-2025-55328.md) | High | Windows Hyper-V | 7.8 | 0.0027 | | | [CVE-2025-55335](https://patchblox.com/security/data/cve/CVE-2025-55335.md) | High | Windows NTFS | 7.4 | 0.0027 | | | [CVE-2025-55687](https://patchblox.com/security/data/cve/CVE-2025-55687.md) | High | Windows Resilient File System (ReFS) | 7.4 | 0.0027 | | | [CVE-2025-59196](https://patchblox.com/security/data/cve/CVE-2025-59196.md) | High | Windows SSDP Service | 7.0 | 0.0027 | | | [CVE-2025-58725](https://patchblox.com/security/data/cve/CVE-2025-58725.md) | High | Windows COM | 7.0 | 0.0026 | | | [CVE-2025-59195](https://patchblox.com/security/data/cve/CVE-2025-59195.md) | High | Microsoft Graphics Component | 7.0 | 0.0025 | | | [CVE-2025-55696](https://patchblox.com/security/data/cve/CVE-2025-55696.md) | High | NtQueryInformation Token function (ntifs.h) | 7.8 | 0.0023 | | | [CVE-2025-58720](https://patchblox.com/security/data/cve/CVE-2025-58720.md) | High | Windows Cryptographic Services | 7.8 | 0.0021 | | | [CVE-2025-59205](https://patchblox.com/security/data/cve/CVE-2025-59205.md) | High | Microsoft Graphics Component | 7.0 | 0.0020 | | | [CVE-2025-59193](https://patchblox.com/security/data/cve/CVE-2025-59193.md) | High | Windows Management Services | 7.0 | 0.0020 | | | [CVE-2025-55338](https://patchblox.com/security/data/cve/CVE-2025-55338.md) | Routine | Windows BitLocker | 6.1 | 0.0307 | | | [CVE-2025-59214](https://patchblox.com/security/data/cve/CVE-2025-59214.md) | Routine | Windows File Explorer | 6.5 | 0.0186 | | | [CVE-2025-59259](https://patchblox.com/security/data/cve/CVE-2025-59259.md) | Routine | Windows Local Session Manager (LSM) | 6.5 | 0.0154 | | | [CVE-2025-59185](https://patchblox.com/security/data/cve/CVE-2025-59185.md) | Routine | Windows Core Shell | 6.5 | 0.0114 | | | [CVE-2025-58729](https://patchblox.com/security/data/cve/CVE-2025-58729.md) | Routine | Windows Local Session Manager (LSM) | 6.5 | 0.0108 | | | [CVE-2025-55700](https://patchblox.com/security/data/cve/CVE-2025-55700.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0097 | | | [CVE-2025-58717](https://patchblox.com/security/data/cve/CVE-2025-58717.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0097 | | | [CVE-2025-55333](https://patchblox.com/security/data/cve/CVE-2025-55333.md) | Routine | Windows BitLocker | 6.1 | 0.0085 | | | [CVE-2025-58739](https://patchblox.com/security/data/cve/CVE-2025-58739.md) | Routine | Windows File Explorer | 6.5 | 0.0082 | | | [CVE-2025-59244](https://patchblox.com/security/data/cve/CVE-2025-59244.md) | Routine | Windows Core Shell | 6.5 | 0.0082 | | | [CVE-2025-59294](https://patchblox.com/security/data/cve/CVE-2025-59294.md) | Routine | Windows Taskbar Live | 2.1 | 0.0063 | | | [CVE-2025-59186](https://patchblox.com/security/data/cve/CVE-2025-59186.md) | Routine | Windows Kernel | 5.5 | 0.0063 | | | [CVE-2025-55336](https://patchblox.com/security/data/cve/CVE-2025-55336.md) | Routine | Windows Cloud Files Mini Filter Driver | 5.5 | 0.0062 | | | [CVE-2025-59211](https://patchblox.com/security/data/cve/CVE-2025-59211.md) | Routine | Windows Push Notification Core | 5.5 | 0.0062 | | | [CVE-2025-59258](https://patchblox.com/security/data/cve/CVE-2025-59258.md) | Routine | Active Directory Federation Services | 6.2 | 0.0060 | | | [CVE-2025-55332](https://patchblox.com/security/data/cve/CVE-2025-55332.md) | Routine | Windows BitLocker | 6.1 | 0.0057 | | | [CVE-2025-55683](https://patchblox.com/security/data/cve/CVE-2025-55683.md) | Routine | Windows Kernel | 5.5 | 0.0056 | | | [CVE-2025-62208](https://patchblox.com/security/data/cve/CVE-2025-62208.md) | Routine | Windows License Manager | 5.5 | 0.0055 | | | [CVE-2025-62209](https://patchblox.com/security/data/cve/CVE-2025-62209.md) | Routine | Windows License Manager | 5.5 | 0.0055 | | | [CVE-2025-55699](https://patchblox.com/security/data/cve/CVE-2025-55699.md) | Routine | Windows Kernel | 5.5 | 0.0054 | | | [CVE-2025-55325](https://patchblox.com/security/data/cve/CVE-2025-55325.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0053 | | | [CVE-2025-59204](https://patchblox.com/security/data/cve/CVE-2025-59204.md) | Routine | Windows Management Services | 5.5 | 0.0053 | | | [CVE-2025-59190](https://patchblox.com/security/data/cve/CVE-2025-59190.md) | Routine | Microsoft Windows Search Component | 5.5 | 0.0050 | | | [CVE-2025-59198](https://patchblox.com/security/data/cve/CVE-2025-59198.md) | Routine | Microsoft Windows Search Component | 5.0 | 0.0049 | | | [CVE-2025-59209](https://patchblox.com/security/data/cve/CVE-2025-59209.md) | Routine | Windows Push Notification Core | 5.5 | 0.0048 | | | [CVE-2025-55679](https://patchblox.com/security/data/cve/CVE-2025-55679.md) | Routine | Windows Kernel | 5.1 | 0.0047 | | | [CVE-2025-59197](https://patchblox.com/security/data/cve/CVE-2025-59197.md) | Routine | Windows ETL Channel | 5.5 | 0.0046 | | | [CVE-2025-59203](https://patchblox.com/security/data/cve/CVE-2025-59203.md) | Routine | Windows StateRepository API | 5.5 | 0.0046 | | | [CVE-2025-59280](https://patchblox.com/security/data/cve/CVE-2025-59280.md) | Routine | Windows SMB Client | 3.1 | 0.0045 | | | [CVE-2025-59184](https://patchblox.com/security/data/cve/CVE-2025-59184.md) | Routine | Windows High Availability Services | 5.5 | 0.0044 | | | [CVE-2025-59188](https://patchblox.com/security/data/cve/CVE-2025-59188.md) | Routine | Windows Failover Cluster | 5.5 | 0.0044 | | | [CVE-2025-55695](https://patchblox.com/security/data/cve/CVE-2025-55695.md) | Routine | Windows WLAN Auto Config Service | 5.5 | 0.0042 | | | [CVE-2025-59260](https://patchblox.com/security/data/cve/CVE-2025-59260.md) | Routine | Microsoft Failover Cluster Virtual Driver | 5.5 | 0.0041 | | | [CVE-2025-58719](https://patchblox.com/security/data/cve/CVE-2025-58719.md) | Routine | Connected Devices Platform Service (Cdpsvc) | 4.7 | 0.0041 | | | [CVE-2025-59253](https://patchblox.com/security/data/cve/CVE-2025-59253.md) | Routine | Microsoft Windows Search Component | 5.5 | 0.0035 | | | [CVE-2025-48813](https://patchblox.com/security/data/cve/CVE-2025-48813.md) | Routine | Virtual Secure Mode | 6.3 | 0.0026 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo