# Security updates released in September 2025 - Web page: https://patchblox.com/security/patch-radar/2025/09 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 38 | 81 | 0 | 0 | | macOS | 6 | 101 | 0 | 0 | | Linux | 2,498 | 1,614 | 57 | 57 | ## Patch Tuesday, September 9, 2025 80 CVEs, 7 Critical, 0 exploited, 2 publicly disclosed, in 36 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 65 | 0 | 0 | | Windows 11 | 55 | 0 | 0 | | Windows 10 | 49 | 0 | 0 | | Microsoft Office | 12 | 0 | 0 | | SharePoint Server | 3 | 0 | 0 | | SQL Server | 3 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5065426](https://patchblox.com/security/data/fix/microsoft/kb5065426.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | Sep 9, 2025 | Urgent | 63 | 0 | CVE-2025-54918 | | [KB5065474](https://patchblox.com/security/data/fix/microsoft/kb5065474.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | Sep 9, 2025 | Urgent | 63 | 0 | CVE-2025-54918 | | [KB5065425](https://patchblox.com/security/data/fix/microsoft/kb5065425.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Sep 9, 2025 | Urgent | 61 | 0 | CVE-2025-54918 | | [KB5065306](https://patchblox.com/security/data/fix/microsoft/kb5065306.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Sep 9, 2025 | Urgent | 59 | 0 | CVE-2025-54918 | | [KB5065432](https://patchblox.com/security/data/fix/microsoft/kb5065432.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Sep 9, 2025 | Urgent | 59 | 0 | CVE-2025-54918 | | [KB5065428](https://patchblox.com/security/data/fix/microsoft/kb5065428.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Sep 9, 2025 | Urgent | 52 | 0 | CVE-2025-54918 | | [KB5065431](https://patchblox.com/security/data/fix/microsoft/kb5065431.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more | Sep 9, 2025 | Urgent | 50 | 0 | CVE-2025-54918 | | [KB5065429](https://patchblox.com/security/data/fix/microsoft/kb5065429.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Sep 9, 2025 | Urgent | 49 | 0 | CVE-2025-54918 | | [KB5065427](https://patchblox.com/security/data/fix/microsoft/kb5065427.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Sep 9, 2025 | Urgent | 45 | 0 | CVE-2025-54918 | | [KB5065507](https://patchblox.com/security/data/fix/microsoft/kb5065507.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Sep 9, 2025 | Urgent | 35 | 0 | CVE-2025-54918 | | [KB5065509](https://patchblox.com/security/data/fix/microsoft/kb5065509.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Sep 9, 2025 | Urgent | 34 | 0 | CVE-2025-54918 | | [KB5065468](https://patchblox.com/security/data/fix/microsoft/kb5065468.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Sep 9, 2025 | Urgent | 30 | 0 | CVE-2025-54918 | | [KB5065510](https://patchblox.com/security/data/fix/microsoft/kb5065510.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Sep 9, 2025 | Urgent | 30 | 0 | CVE-2025-54918 | | [KB5065430](https://patchblox.com/security/data/fix/microsoft/kb5065430.md) | Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems | Sep 9, 2025 | Urgent | 30 | 0 | CVE-2025-54918 | | [KB5065508](https://patchblox.com/security/data/fix/microsoft/kb5065508.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Sep 9, 2025 | Urgent | 26 | 0 | CVE-2025-54918 | | [KB5065511](https://patchblox.com/security/data/fix/microsoft/kb5065511.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Sep 9, 2025 | Urgent | 26 | 0 | CVE-2025-54918 | | [KB5002781](https://patchblox.com/security/data/fix/microsoft/kb5002781.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Sep 16, 2025 | Urgent | 2 | 0 | CVE-2025-54910 | | [KB5065222](https://patchblox.com/security/data/fix/microsoft/kb5065222.md) | Microsoft SQL Server 2019 for x64-based Systems (CU 32) | Sep 9, 2025 | High | 3 | 0 | CVE-2025-55227 | | [KB5065223](https://patchblox.com/security/data/fix/microsoft/kb5065223.md) | Microsoft SQL Server 2019 for x64-based Systems (GDR) | Sep 9, 2025 | High | 3 | 0 | CVE-2025-55227 | | [KB5065224](https://patchblox.com/security/data/fix/microsoft/kb5065224.md) | Microsoft SQL Server 2017 for x64-based Systems (GDR) | Sep 9, 2025 | High | 3 | 0 | CVE-2025-55227 | | [KB5065225](https://patchblox.com/security/data/fix/microsoft/kb5065225.md) | Microsoft SQL Server 2017 for x64-based Systems (CU 31) | Sep 9, 2025 | High | 3 | 0 | CVE-2025-55227 | | [KB5065226](https://patchblox.com/security/data/fix/microsoft/kb5065226.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) | Sep 9, 2025 | High | 3 | 0 | CVE-2025-55227 | | [KB5065227](https://patchblox.com/security/data/fix/microsoft/kb5065227.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack | Sep 9, 2025 | High | 3 | 0 | CVE-2025-55227 | | [KB5002775](https://patchblox.com/security/data/fix/microsoft/kb5002775.md) | Microsoft SharePoint Server 2019 | Sep 9, 2025 | High | 3 | 0 | CVE-2025-54897 | | [KB5002778](https://patchblox.com/security/data/fix/microsoft/kb5002778.md) | Microsoft SharePoint Enterprise Server 2016 | Sep 9, 2025 | High | 3 | 0 | CVE-2025-54897 | | [KB5002784](https://patchblox.com/security/data/fix/microsoft/kb5002784.md) | Microsoft SharePoint Server Subscription Edition | Sep 9, 2025 | High | 1 | 0 | CVE-2025-54897 | | [KB5065220](https://patchblox.com/security/data/fix/microsoft/kb5065220.md) | Microsoft SQL Server 2022 for x64-based Systems (CU 20) | Sep 9, 2025 | High | 2 | 0 | CVE-2025-55227 | | [KB5065221](https://patchblox.com/security/data/fix/microsoft/kb5065221.md) | Microsoft SQL Server 2022 for x64-based Systems (GDR) | Sep 9, 2025 | High | 2 | 0 | CVE-2025-55227 | | [KB5002576](https://patchblox.com/security/data/fix/microsoft/kb5002576.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Sep 9, 2025 | High | 1 | 0 | CVE-2025-54906 | | [KB5002766](https://patchblox.com/security/data/fix/microsoft/kb5002766.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Sep 9, 2025 | High | 1 | 0 | CVE-2025-54906 | | [KB5002774](https://patchblox.com/security/data/fix/microsoft/kb5002774.md) | Microsoft SharePoint Server 2019 | Sep 9, 2025 | High | 1 | 0 | CVE-2025-54905 | | [KB5002777](https://patchblox.com/security/data/fix/microsoft/kb5002777.md) | Microsoft SharePoint Enterprise Server 2016 | Sep 9, 2025 | High | 1 | 0 | CVE-2025-54905 | | [KB5002780](https://patchblox.com/security/data/fix/microsoft/kb5002780.md) | Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | Sep 9, 2025 | High | 1 | 0 | CVE-2025-54905 | | [KB5002779](https://patchblox.com/security/data/fix/microsoft/kb5002779.md) | Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition) | Sep 9, 2025 | High | 1 | 0 | CVE-2025-54908 | | [KB5002782](https://patchblox.com/security/data/fix/microsoft/kb5002782.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Sep 9, 2025 | High | 7 | 0 | CVE-2025-54904 | | [KB5002776](https://patchblox.com/security/data/fix/microsoft/kb5002776.md) | Office Online Server | Sep 9, 2025 | High | 6 | 0 | CVE-2025-54904 | | [KB5065435](https://patchblox.com/security/data/fix/microsoft/kb5065435.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Windows Server 2008 for 32-bit Systems Service Pack 2 and 7 more | Sep 9, 2025 | Routine | 2 | 0 | CVE-2025-54107 | | [KB5002762](https://patchblox.com/security/data/fix/microsoft/kb5002762.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Sep 16, 2025 | Routine | 1 | 0 | CVE-2025-54901 | ## macOS updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [Tahoe 26.0](https://patchblox.com/security/data/fix/macos/tahoe-26.0.md) | Tahoe | Sep 15, 2025 | Urgent | 94 | 0 | CVE-2024-27280 | | [Sonoma 14.8](https://patchblox.com/security/data/fix/macos/sonoma-14.8.md) | Sonoma | Sep 15, 2025 | Urgent | 46 | 0 | CVE-2024-27280 | | [Sequoia 15.7](https://patchblox.com/security/data/fix/macos/sequoia-15.7.md) | Sequoia | Sep 15, 2025 | Urgent | 45 | 0 | CVE-2024-27280 | | [Sequoia 15.7.1](https://patchblox.com/security/data/fix/macos/sequoia-15.7.1.md) | Sequoia | Sep 29, 2025 | Routine | 1 | 0 | CVE-2025-43400 | | [Sonoma 14.8.1](https://patchblox.com/security/data/fix/macos/sonoma-14.8.1.md) | Sonoma | Sep 29, 2025 | Routine | 1 | 0 | CVE-2025-43400 | | [Tahoe 26.0.1](https://patchblox.com/security/data/fix/macos/tahoe-26.0.1.md) | Tahoe | Sep 29, 2025 | Routine | 1 | 0 | CVE-2025-43400 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Ubuntu | 1,208 | 75 | 28 | 28 | | Debian | 909 | 882 | 4 | 4 | | sles | 99 | 272 | 0 | 0 | | Red Hat | 77 | 164 | 8 | 8 | | ol | 64 | 417 | 8 | 8 | | almalinux | 63 | 138 | 6 | 6 | | amzn | 36 | 204 | 2 | 2 | | rocky | 34 | 71 | 1 | 1 | | opensuse-leap | 8 | 10 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [RLSA-2025:13780](https://patchblox.com/security/data/fix/linux/rlsa-2025-13780.md) | webkit2gtk3 on rocky 8 | Sep 8, 2025 | Patch now | 9 | 1 | CVE-2025-6558 | | [DEBIAN-CVE-2025-10585](https://patchblox.com/security/data/fix/linux/debian-cve-2025-10585.md) | chromium on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Sep 24, 2025 | Patch now | 1 | 1 | CVE-2025-10585 | | [DLA-4316-1](https://patchblox.com/security/data/fix/linux/dla-4316-1.md) | open-vm-tools on Debian 11.6 (bullseye) | Sep 30, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | | [DEBIAN-CVE-2025-41244](https://patchblox.com/security/data/fix/linux/debian-cve-2025-41244.md) | open-vm-tools on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Sep 29, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | | [RHSA-2025:17429](https://patchblox.com/security/data/fix/linux/rhsa-2025-17429.md) | open-vm-tools on RHEL 10 | Sep 29, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | | [open-vm-tools 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-2-12.5.0-1ubuntu0.2.md) | open-vm-tools on Ubuntu 25.04 (plucky) | Sep 29, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | | [open-vm-tools-containerinfo 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-containerinfo-2-12.5.0-1ubuntu0.2.md) | open-vm-tools-containerinfo on Ubuntu 25.04 (plucky) | Sep 29, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | | [open-vm-tools-desktop 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-desktop-2-12.5.0-1ubuntu0.2.md) | open-vm-tools-desktop on Ubuntu 25.04 (plucky) | Sep 29, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | | [open-vm-tools-salt-minion 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-salt-minion-2-12.5.0-1ubuntu0.2.md) | open-vm-tools-salt-minion on Ubuntu 25.04 (plucky) | Sep 29, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | | [open-vm-tools-sdmp 2:12.5.0-1ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-open-vm-tools-sdmp-2-12.5.0-1ubuntu0.2.md) | open-vm-tools-sdmp on Ubuntu 25.04 (plucky) | Sep 29, 2025 | Patch now | 1 | 1 | CVE-2025-41244 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo