{
  "fix": "KB5066876",
  "url": "https://patchblox.com/security/fix/microsoft/kb5066876",
  "summary": "KB5066876, released October 14, 2025, fixes 37 CVEs across 2 products. 2 of them are being exploited (CVE-2025-24990); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "October 2025 security update",
  "released": "2025-10-14T12:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-24990, exploited (CISA KEV)",
  "supported": false,
  "cveCount": 37,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.06514,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://support.microsoft.com/help/5066876",
  "appliesTo": [
    {
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1",
      "fixedVersion": "",
      "supported": false
    },
    {
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation",
      "fixedVersion": "",
      "supported": false
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-24990",
      "url": "https://patchblox.com/security/cve/CVE-2025-24990",
      "title": "Windows Agere Modem Driver Elevation of Privilege Vulnerability",
      "component": "Agere Windows Modem Driver",
      "impact": "Elevation of Privilege",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.06514,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59230",
      "url": "https://patchblox.com/security/cve/CVE-2025-59230",
      "title": "Windows Remote Access Connection Manager Elevation of Privilege Vulnerability",
      "component": "Windows Remote Access Connection Manager",
      "impact": "Elevation of Privilege",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.02718,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-9535",
      "url": "https://patchblox.com/security/cve/CVE-2016-9535",
      "title": "MITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 4,
      "epss": 0.04728,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24052",
      "url": "https://patchblox.com/security/cve/CVE-2025-24052",
      "title": "Windows Agere Modem Driver Elevation of Privilege Vulnerability",
      "component": "Agere Windows Modem Driver",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.02544,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": true
    },
    {
      "cveId": "CVE-2025-59295",
      "url": "https://patchblox.com/security/cve/CVE-2025-59295",
      "title": "Windows URL Parsing Remote Code Execution Vulnerability",
      "component": "Internet Explorer",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58726",
      "url": "https://patchblox.com/security/cve/CVE-2025-58726",
      "title": "Windows SMB Server Elevation of Privilege Vulnerability",
      "component": "Windows SMB Server",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59282",
      "url": "https://patchblox.com/security/cve/CVE-2025-59282",
      "title": "Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability",
      "component": "Inbox COM Objects",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58718",
      "url": "https://patchblox.com/security/cve/CVE-2025-58718",
      "title": "Remote Desktop Client Remote Code Execution Vulnerability",
      "component": "Remote Desktop Client",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00596,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59208",
      "url": "https://patchblox.com/security/cve/CVE-2025-59208",
      "title": "Windows MapUrlToZone Information Disclosure Vulnerability",
      "component": "Windows MapUrlToZone",
      "impact": "Information Disclosure",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-25004",
      "url": "https://patchblox.com/security/cve/CVE-2025-25004",
      "title": "PowerShell Elevation of Privilege Vulnerability",
      "component": "Microsoft PowerShell",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.00487,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58732",
      "url": "https://patchblox.com/security/cve/CVE-2025-58732",
      "title": "Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability",
      "component": "Inbox COM Objects",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00474,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58735",
      "url": "https://patchblox.com/security/cve/CVE-2025-58735",
      "title": "Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability",
      "component": "Inbox COM Objects",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00474,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59201",
      "url": "https://patchblox.com/security/cve/CVE-2025-59201",
      "title": "Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability",
      "component": "Network Connection Status Indicator (NCSI)",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0046,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-55701",
      "url": "https://patchblox.com/security/cve/CVE-2025-55701",
      "title": "Windows Authentication Elevation of Privilege Vulnerability",
      "component": "Microsoft Windows",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59242",
      "url": "https://patchblox.com/security/cve/CVE-2025-59242",
      "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability",
      "component": "Windows Ancillary Function Driver for WinSock",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59277",
      "url": "https://patchblox.com/security/cve/CVE-2025-59277",
      "title": "Windows Authentication Elevation of Privilege Vulnerability",
      "component": "Windows Authentication Methods",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00386,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58730",
      "url": "https://patchblox.com/security/cve/CVE-2025-58730",
      "title": "Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability",
      "component": "Inbox COM Objects",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.0035,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58733",
      "url": "https://patchblox.com/security/cve/CVE-2025-58733",
      "title": "Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability",
      "component": "Inbox COM Objects",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.0035,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58736",
      "url": "https://patchblox.com/security/cve/CVE-2025-58736",
      "title": "Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability",
      "component": "Inbox COM Objects",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.0035,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59187",
      "url": "https://patchblox.com/security/cve/CVE-2025-59187",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-55678",
      "url": "https://patchblox.com/security/cve/CVE-2025-55678",
      "title": "DirectX Graphics Kernel Elevation of Privilege Vulnerability",
      "component": "Windows DirectX",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59275",
      "url": "https://patchblox.com/security/cve/CVE-2025-59275",
      "title": "Windows Authentication Elevation of Privilege Vulnerability",
      "component": "Windows Authentication Methods",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59278",
      "url": "https://patchblox.com/security/cve/CVE-2025-59278",
      "title": "Windows Authentication Elevation of Privilege Vulnerability",
      "component": "Windows Authentication Methods",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58714",
      "url": "https://patchblox.com/security/cve/CVE-2025-58714",
      "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability",
      "component": "Windows Ancillary Function Driver for WinSock",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-55335",
      "url": "https://patchblox.com/security/cve/CVE-2025-55335",
      "title": "Windows NTFS Elevation of Privilege Vulnerability",
      "component": "Windows NTFS",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59196",
      "url": "https://patchblox.com/security/cve/CVE-2025-59196",
      "title": "Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability",
      "component": "Windows SSDP Service",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58725",
      "url": "https://patchblox.com/security/cve/CVE-2025-58725",
      "title": "Windows COM\u002B Event System Service Elevation of Privilege Vulnerability",
      "component": "Windows COM",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59205",
      "url": "https://patchblox.com/security/cve/CVE-2025-59205",
      "title": "Windows Graphics Component Elevation of Privilege Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59214",
      "url": "https://patchblox.com/security/cve/CVE-2025-59214",
      "title": "Microsoft Windows File Explorer Spoofing Vulnerability",
      "component": "Windows File Explorer",
      "impact": "Spoofing",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.01857,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58729",
      "url": "https://patchblox.com/security/cve/CVE-2025-58729",
      "title": "Windows Local Session Manager (LSM) Denial of Service Vulnerability",
      "component": "Windows Local Session Manager (LSM)",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.01081,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-55700",
      "url": "https://patchblox.com/security/cve/CVE-2025-55700",
      "title": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability",
      "component": "Windows Routing and Remote Access Service (RRAS)",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.00966,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58717",
      "url": "https://patchblox.com/security/cve/CVE-2025-58717",
      "title": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability",
      "component": "Windows Routing and Remote Access Service (RRAS)",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.00966,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-58739",
      "url": "https://patchblox.com/security/cve/CVE-2025-58739",
      "title": "Microsoft Windows File Explorer Spoofing Vulnerability",
      "component": "Windows File Explorer",
      "impact": "Spoofing",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.00818,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59190",
      "url": "https://patchblox.com/security/cve/CVE-2025-59190",
      "title": "Windows Search Service Denial of Service Vulnerability",
      "component": "Microsoft Windows Search Component",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59198",
      "url": "https://patchblox.com/security/cve/CVE-2025-59198",
      "title": "Windows Search Service Denial of Service Vulnerability",
      "component": "Microsoft Windows Search Component",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5,
      "epss": 0.00485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-59280",
      "url": "https://patchblox.com/security/cve/CVE-2025-59280",
      "title": "Windows SMB Client Tampering Vulnerability",
      "component": "Windows SMB Client",
      "impact": "Tampering",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 3.1,
      "epss": 0.00454,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-55695",
      "url": "https://patchblox.com/security/cve/CVE-2025-55695",
      "title": "Windows WLAN AutoConfig Service Information Disclosure Vulnerability",
      "component": "Windows WLAN Auto Config Service",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}