Microsoft · ServicingStack update · September 9, 2025
KB5065431: September 2025 cumulative update for Windows 11 22H2
KB5065431, released September 9, 2025, fixes 50 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent1 publicly disclosed
CVEs closed
50
8 rated Critical
Exploited
0
None reported
Exploitation more likely
9
Microsoft's assessment
Highest EPSS
0.2528
97th percentile
Priority of the 50 CVEs
Patch now 0
Urgent 16
High 25
Routine 9
Applies to
| Product |
|---|
| Windows 11 Version 22H2 for ARM64-based Systems |
| Windows 11 Version 22H2 for x64-based Systems |
| Windows 11 Version 23H2 for ARM64-based Systems |
| Windows 11 Version 23H2 for x64-based Systems |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-54918 | Windows NTLM | Elevation of Privilege | 8.8 | 0.2528 | More likely |
| Urgent | CVE-2025-55234 | Windows SMB | Elevation of Privilege | 8.8 | 0.2076 | DisclosedMore likely |
| Urgent | CVE-2025-54110 | Windows Kernel | Elevation of Privilege | 8.8 | 0.0472 | More likely |
| Urgent | CVE-2025-54098 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0332 | More likely |
| Urgent | CVE-2025-54916 | Windows NTFS | Remote Code Execution | 7.8 | 0.0278 | More likely |
| Urgent | CVE-2025-59502 | Windows Remote Procedure Call | Denial of Service | 7.5 | 0.0106 | More likely |
| Urgent | CVE-2025-53799 | Windows Imaging Component | Information Disclosure | 5.5 | 0.0084 | Exploitation Unlikely |
| Urgent | CVE-2025-53803 | Windows Kernel | Information Disclosure | 5.5 | 0.0066 | More likely |
| Urgent | CVE-2025-53804 | Windows Kernel | Information Disclosure | 5.5 | 0.0066 | More likely |
| Urgent | CVE-2025-48807 | Role: Windows Hyper-V | Remote Code Execution | 6.7 | 0.0058 | Exploitation Less Likely |
| Urgent | CVE-2025-55226 | Graphics Kernel | Remote Code Execution | 6.7 | 0.0053 | Exploitation Less Likely |
| Urgent | CVE-2025-53800 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0050 | Exploitation Less Likely |
| Urgent | CVE-2025-55236 | Graphics Kernel | Remote Code Execution | 7.3 | 0.0043 | Exploitation Less Likely |
| Urgent | CVE-2025-54093 | Windows TCP/IP | Elevation of Privilege | 7.0 | 0.0038 | More likely |
| Urgent | CVE-2025-55224 | Windows Win32K - GRFX | Remote Code Execution | 7.8 | 0.0036 | Exploitation Less Likely |
| Urgent | CVE-2025-55228 | Windows Win32K - GRFX | Remote Code Execution | 7.8 | 0.0033 | Exploitation Less Likely |
| High | CVE-2025-53805 | Windows Internet Information Services | Denial of Service | 7.5 | 0.0151 | Exploitation Unlikely |
| High | CVE-2025-54911 | Windows BitLocker | Elevation of Privilege | 7.3 | 0.0077 | Exploitation Less Likely |
| High | CVE-2025-54912 | Windows BitLocker | Elevation of Privilege | 7.8 | 0.0054 | Exploitation Less Likely |
| High | CVE-2025-54116 | Windows MultiPoint Services | Elevation of Privilege | 7.3 | 0.0053 | Exploitation Unlikely |
| High | CVE-2025-53801 | Windows DWM | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54091 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54102 | Windows Connected Devices Platform Service | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54894 | Windows Local Security Authority Subsystem Service (LSASS) | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54115 | Role: Windows Hyper-V | Elevation of Privilege | 7.0 | 0.0042 | Exploitation Less Likely |
Showing 1 to 25 of 50
1Next
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.