Microsoft · ServicingStack update · September 9, 2025

KB5065425: September 2025 cumulative update for Windows Server 23H2

KB5065425, released September 9, 2025, fixes 61 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1849). None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent1 publicly disclosedUnsupported product
CVEs closed
61
8 rated Critical
Exploited
0
None reported
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.2528
97th percentile

Priority of the 61 CVEs

Patch now 0 Urgent 16 High 28 Routine 17

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.1849

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-54918 Windows NTLM Elevation of Privilege 8.8 0.2528 More likely
Urgent CVE-2025-55234 Windows SMB Elevation of Privilege 8.8 0.2076 DisclosedMore likely
Urgent CVE-2025-54110 Windows Kernel Elevation of Privilege 8.8 0.0472 More likely
Urgent CVE-2025-54098 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0332 More likely
Urgent CVE-2025-54916 Windows NTFS Remote Code Execution 7.8 0.0278 More likely
Urgent CVE-2025-59502 Windows Remote Procedure Call Denial of Service 7.5 0.0106 More likely
Urgent CVE-2025-53799 Windows Imaging Component Information Disclosure 5.5 0.0084 Exploitation Unlikely
Urgent CVE-2025-53803 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-53804 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-48807 Role: Windows Hyper-V Remote Code Execution 6.7 0.0058 Exploitation Less Likely
Urgent CVE-2025-55226 Graphics Kernel Remote Code Execution 6.7 0.0053 Exploitation Less Likely
Urgent CVE-2025-53800 Microsoft Graphics Component Elevation of Privilege 7.8 0.0050 Exploitation Less Likely
Urgent CVE-2025-55236 Graphics Kernel Remote Code Execution 7.3 0.0043 Exploitation Less Likely
Urgent CVE-2025-54093 Windows TCP/IP Elevation of Privilege 7.0 0.0038 More likely
Urgent CVE-2025-55224 Windows Win32K - GRFX Remote Code Execution 7.8 0.0036 Exploitation Less Likely
Urgent CVE-2025-55228 Windows Win32K - GRFX Remote Code Execution 7.8 0.0033 Exploitation Less Likely
High CVE-2025-53805 Windows Internet Information Services Denial of Service 7.5 0.0151 Exploitation Unlikely
High CVE-2025-54106 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2025-54113 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0094 Exploitation Unlikely
High CVE-2025-54911 Windows BitLocker Elevation of Privilege 7.3 0.0077 Exploitation Less Likely
High CVE-2025-54912 Windows BitLocker Elevation of Privilege 7.8 0.0054 Exploitation Less Likely
High CVE-2025-54116 Windows MultiPoint Services Elevation of Privilege 7.3 0.0053 Exploitation Unlikely
High CVE-2025-53801 Windows DWM Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54091 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
Showing 1 to 25 of 61 1Next