Microsoft · Security update · October 14, 2025
KB5066835: October 2025 cumulative update for Windows 11 24H2
KB5066835, released October 14, 2025, fixes 134 CVEs across 6 products. 3 of them are being exploited (CVE-2025-24990); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV2 publicly disclosed
CVEs closed
134
2 rated Critical
Exploited
3
CVE-2025-24990
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.0651
93rd percentile
Priority of the 134 CVEs
Patch now 3
Urgent 13
High 74
Routine 44
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-24990 | Agere Windows Modem Driver | Elevation of Privilege | 7.8 | 0.0651 | KEVExploited |
| Patch now | CVE-2025-47827 | Windows Secure Boot | Security Feature Bypass | 4.6 | 0.0515 | KEVExploited |
| Patch now | CVE-2025-59230 | Windows Remote Access Connection Manager | Elevation of Privilege | 7.8 | 0.0272 | KEVExploited |
| Urgent | CVE-2025-55681 | Windows DWM | Elevation of Privilege | 7.0 | 0.0550 | More likely |
| Urgent | CVE-2016-9535 | Microsoft Graphics Component | Remote Code Execution | 4.0 | 0.0473 | Exploitation Unlikely |
| Urgent | CVE-2025-59199 | Software Protection Platform (SPP) | Elevation of Privilege | 7.8 | 0.0455 | More likely |
| Urgent | CVE-2025-55692 | Windows Error Reporting | Elevation of Privilege | 7.8 | 0.0363 | More likely |
| Urgent | CVE-2025-55694 | Windows Error Reporting | Elevation of Privilege | 7.8 | 0.0325 | More likely |
| Urgent | CVE-2025-59194 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0285 | More likely |
| Urgent | CVE-2025-24052 | Agere Windows Modem Driver | Elevation of Privilege | 7.8 | 0.0254 | DisclosedMore likely |
| Urgent | CVE-2025-58722 | Windows DWM | Elevation of Privilege | 7.8 | 0.0234 | More likely |
| Urgent | CVE-2025-48004 | Microsoft Brokering File System | Elevation of Privilege | 7.4 | 0.0223 | More likely |
| Urgent | CVE-2025-55693 | Windows Kernel | Elevation of Privilege | 7.4 | 0.0211 | More likely |
| Urgent | CVE-2025-49708 | Microsoft Graphics Component | Elevation of Privilege | 9.9 | 0.0126 | Exploitation Less Likely |
| Urgent | CVE-2025-55676 | Windows USB Video Driver | Information Disclosure | 5.5 | 0.0067 | More likely |
| Urgent | CVE-2025-55680 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.0044 | More likely |
| High | CVE-2025-59295 | Internet Explorer | Remote Code Execution | 8.8 | 0.0190 | Exploitation Less Likely |
| High | CVE-2025-54957 | Microsoft Windows Codecs Library | Remote Code Execution | 7.0 | 0.0160 | Exploitation Less Likely |
| High | CVE-2025-55698 | Windows DirectX | Denial of Service | 7.7 | 0.0122 | Exploitation Less Likely |
| High | CVE-2025-59254 | Windows DWM Core Library | Elevation of Privilege | 7.8 | 0.0114 | Exploitation Unlikely |
| High | CVE-2025-58726 | Windows SMB Server | Elevation of Privilege | 7.5 | 0.0104 | Exploitation Less Likely |
| High | CVE-2025-55326 | Connected Devices Platform Service (Cdpsvc) | Remote Code Execution | 7.5 | 0.0084 | Exploitation Less Likely |
| High | CVE-2025-59200 | Data Sharing Service Client | Spoofing | 7.7 | 0.0081 | Exploitation Less Likely |
| High | CVE-2025-59282 | Inbox COM Objects | Remote Code Execution | 7.0 | 0.0061 | Exploitation Unlikely |
| High | CVE-2025-58718 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0060 | Exploitation Less Likely |
Showing 1 to 25 of 134
1Next