Microsoft · Security update · September 9, 2025
KB5065429: September 2025 cumulative update for Windows 10 21H2
KB5065429, released September 9, 2025, fixes 49 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent1 publicly disclosed
CVEs closed
49
8 rated Critical
Exploited
0
None reported
Exploitation more likely
9
Microsoft's assessment
Highest EPSS
0.2528
97th percentile
Priority of the 49 CVEs
Patch now 0
Urgent 16
High 24
Routine 9
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-54918 | Windows NTLM | Elevation of Privilege | 8.8 | 0.2528 | More likely |
| Urgent | CVE-2025-55234 | Windows SMB | Elevation of Privilege | 8.8 | 0.2076 | DisclosedMore likely |
| Urgent | CVE-2025-54110 | Windows Kernel | Elevation of Privilege | 8.8 | 0.0472 | More likely |
| Urgent | CVE-2025-54098 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0332 | More likely |
| Urgent | CVE-2025-54916 | Windows NTFS | Remote Code Execution | 7.8 | 0.0278 | More likely |
| Urgent | CVE-2025-59502 | Windows Remote Procedure Call | Denial of Service | 7.5 | 0.0106 | More likely |
| Urgent | CVE-2025-53799 | Windows Imaging Component | Information Disclosure | 5.5 | 0.0084 | Exploitation Unlikely |
| Urgent | CVE-2025-53803 | Windows Kernel | Information Disclosure | 5.5 | 0.0066 | More likely |
| Urgent | CVE-2025-53804 | Windows Kernel | Information Disclosure | 5.5 | 0.0066 | More likely |
| Urgent | CVE-2025-48807 | Role: Windows Hyper-V | Remote Code Execution | 6.7 | 0.0058 | Exploitation Less Likely |
| Urgent | CVE-2025-55226 | Graphics Kernel | Remote Code Execution | 6.7 | 0.0053 | Exploitation Less Likely |
| Urgent | CVE-2025-53800 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0050 | Exploitation Less Likely |
| Urgent | CVE-2025-55236 | Graphics Kernel | Remote Code Execution | 7.3 | 0.0043 | Exploitation Less Likely |
| Urgent | CVE-2025-54093 | Windows TCP/IP | Elevation of Privilege | 7.0 | 0.0038 | More likely |
| Urgent | CVE-2025-55224 | Windows Win32K - GRFX | Remote Code Execution | 7.8 | 0.0036 | Exploitation Less Likely |
| Urgent | CVE-2025-55228 | Windows Win32K - GRFX | Remote Code Execution | 7.8 | 0.0033 | Exploitation Less Likely |
| High | CVE-2025-54911 | Windows BitLocker | Elevation of Privilege | 7.3 | 0.0077 | Exploitation Less Likely |
| High | CVE-2025-54912 | Windows BitLocker | Elevation of Privilege | 7.8 | 0.0054 | Exploitation Less Likely |
| High | CVE-2025-54116 | Windows MultiPoint Services | Elevation of Privilege | 7.3 | 0.0053 | Exploitation Unlikely |
| High | CVE-2025-53801 | Windows DWM | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54091 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54102 | Windows Connected Devices Platform Service | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54894 | Windows Local Security Authority Subsystem Service (LSASS) | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54115 | Role: Windows Hyper-V | Elevation of Privilege | 7.0 | 0.0042 | Exploitation Less Likely |
| High | CVE-2025-54103 | Windows Management Services | Elevation of Privilege | 7.4 | 0.0041 | Exploitation Less Likely |
Showing 1 to 25 of 49
1Next
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.