# KB5066877: October 2025 security update KB5066877, released October 14, 2025, fixes 34 CVEs across 4 products. 2 of them are being exploited (CVE-2025-24990); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5066877 - Platform: Microsoft - Released: Oct 14, 2025 - Priority: Patch now (Closes CVE-2025-24990, exploited (CISA KEV)) - CVEs: 34, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5066877 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2008 for 32-bit Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2.md) | | | | [Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2-server-core-installation.md) | | | | [Windows Server 2008 for x64-based Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2.md) | | | | [Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-24990](https://patchblox.com/security/data/cve/CVE-2025-24990.md) | Patch now | Agere Windows Modem Driver | 7.8 | 0.0651 | CISA KEV | | [CVE-2025-59230](https://patchblox.com/security/data/cve/CVE-2025-59230.md) | Patch now | Windows Remote Access Connection Manager | 7.8 | 0.0272 | CISA KEV | | [CVE-2016-9535](https://patchblox.com/security/data/cve/CVE-2016-9535.md) | Urgent | Microsoft Graphics Component | 4.0 | 0.0473 | | | [CVE-2025-24052](https://patchblox.com/security/data/cve/CVE-2025-24052.md) | Urgent | Agere Windows Modem Driver | 7.8 | 0.0254 | Disclosed | | [CVE-2025-59295](https://patchblox.com/security/data/cve/CVE-2025-59295.md) | High | Internet Explorer | 8.8 | 0.0190 | | | [CVE-2025-58726](https://patchblox.com/security/data/cve/CVE-2025-58726.md) | High | Windows SMB Server | 7.5 | 0.0104 | | | [CVE-2025-59282](https://patchblox.com/security/data/cve/CVE-2025-59282.md) | High | Inbox COM Objects | 7.0 | 0.0061 | | | [CVE-2025-58718](https://patchblox.com/security/data/cve/CVE-2025-58718.md) | High | Remote Desktop Client | 8.8 | 0.0060 | | | [CVE-2025-59208](https://patchblox.com/security/data/cve/CVE-2025-59208.md) | High | Windows MapUrlToZone | 7.1 | 0.0050 | | | [CVE-2025-25004](https://patchblox.com/security/data/cve/CVE-2025-25004.md) | High | Microsoft PowerShell | 7.3 | 0.0049 | | | [CVE-2025-58735](https://patchblox.com/security/data/cve/CVE-2025-58735.md) | High | Inbox COM Objects | 7.0 | 0.0047 | | | [CVE-2025-59201](https://patchblox.com/security/data/cve/CVE-2025-59201.md) | High | Network Connection Status Indicator (NCSI) | 7.8 | 0.0046 | | | [CVE-2025-55701](https://patchblox.com/security/data/cve/CVE-2025-55701.md) | High | Microsoft Windows | 7.8 | 0.0041 | | | [CVE-2025-59242](https://patchblox.com/security/data/cve/CVE-2025-59242.md) | High | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0041 | | | [CVE-2025-59277](https://patchblox.com/security/data/cve/CVE-2025-59277.md) | High | Windows Authentication Methods | 7.8 | 0.0039 | | | [CVE-2025-58733](https://patchblox.com/security/data/cve/CVE-2025-58733.md) | High | Inbox COM Objects | 7.0 | 0.0035 | | | [CVE-2025-58736](https://patchblox.com/security/data/cve/CVE-2025-58736.md) | High | Inbox COM Objects | 7.0 | 0.0035 | | | [CVE-2025-59187](https://patchblox.com/security/data/cve/CVE-2025-59187.md) | High | Windows Kernel | 7.8 | 0.0031 | | | [CVE-2025-59275](https://patchblox.com/security/data/cve/CVE-2025-59275.md) | High | Windows Authentication Methods | 7.8 | 0.0028 | | | [CVE-2025-59278](https://patchblox.com/security/data/cve/CVE-2025-59278.md) | High | Windows Authentication Methods | 7.8 | 0.0028 | | | [CVE-2025-58714](https://patchblox.com/security/data/cve/CVE-2025-58714.md) | High | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0028 | | | [CVE-2025-55335](https://patchblox.com/security/data/cve/CVE-2025-55335.md) | High | Windows NTFS | 7.4 | 0.0027 | | | [CVE-2025-59196](https://patchblox.com/security/data/cve/CVE-2025-59196.md) | High | Windows SSDP Service | 7.0 | 0.0027 | | | [CVE-2025-58725](https://patchblox.com/security/data/cve/CVE-2025-58725.md) | High | Windows COM | 7.0 | 0.0026 | | | [CVE-2025-59205](https://patchblox.com/security/data/cve/CVE-2025-59205.md) | High | Microsoft Graphics Component | 7.0 | 0.0020 | | | [CVE-2025-59214](https://patchblox.com/security/data/cve/CVE-2025-59214.md) | Routine | Windows File Explorer | 6.5 | 0.0186 | | | [CVE-2025-58729](https://patchblox.com/security/data/cve/CVE-2025-58729.md) | Routine | Windows Local Session Manager (LSM) | 6.5 | 0.0108 | | | [CVE-2025-55700](https://patchblox.com/security/data/cve/CVE-2025-55700.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0097 | | | [CVE-2025-58717](https://patchblox.com/security/data/cve/CVE-2025-58717.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0097 | | | [CVE-2025-58739](https://patchblox.com/security/data/cve/CVE-2025-58739.md) | Routine | Windows File Explorer | 6.5 | 0.0082 | | | [CVE-2025-59190](https://patchblox.com/security/data/cve/CVE-2025-59190.md) | Routine | Microsoft Windows Search Component | 5.5 | 0.0050 | | | [CVE-2025-59198](https://patchblox.com/security/data/cve/CVE-2025-59198.md) | Routine | Microsoft Windows Search Component | 5.0 | 0.0049 | | | [CVE-2025-59280](https://patchblox.com/security/data/cve/CVE-2025-59280.md) | Routine | Windows SMB Client | 3.1 | 0.0045 | | | [CVE-2025-55695](https://patchblox.com/security/data/cve/CVE-2025-55695.md) | Routine | Windows WLAN Auto Config Service | 5.5 | 0.0042 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo