Microsoft · Security update · October 14, 2025

KB5066837: October 2025 cumulative update for Windows 10 1809/Server 2019

KB5066837, released October 14, 2025, fixes 68 CVEs across 2 products. 3 of them are being exploited (CVE-2025-24990); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
68
1 rated Critical
Exploited
3
CVE-2025-24990
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.0651
93rd percentile

Priority of the 68 CVEs

Patch now 3 Urgent 3 High 38 Routine 24

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.21161
Windows 10 for x64-based Systems10240.21161

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-24990 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0651 KEVExploited
Patch now CVE-2025-47827 Windows Secure Boot Security Feature Bypass 4.6 0.0515 KEVExploited
Patch now CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0272 KEVExploited
Urgent CVE-2016-9535 Microsoft Graphics Component Remote Code Execution 4.0 0.0473 Exploitation Unlikely
Urgent CVE-2025-55692 Windows Error Reporting Elevation of Privilege 7.8 0.0363 More likely
Urgent CVE-2025-24052 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0254 DisclosedMore likely
High CVE-2025-59295 Internet Explorer Remote Code Execution 8.8 0.0190 Exploitation Less Likely
High CVE-2025-54957 Microsoft Windows Codecs Library Remote Code Execution 7.0 0.0160 Exploitation Less Likely
High CVE-2025-59254 Windows DWM Core Library Elevation of Privilege 7.8 0.0114 Exploitation Unlikely
High CVE-2025-58726 Windows SMB Server Elevation of Privilege 7.5 0.0104 Exploitation Less Likely
High CVE-2025-59200 Data Sharing Service Client Spoofing 7.7 0.0081 Exploitation Less Likely
High CVE-2025-59282 Inbox COM Objects Remote Code Execution 7.0 0.0061 Exploitation Unlikely
High CVE-2025-58718 Remote Desktop Client Remote Code Execution 8.8 0.0060 Exploitation Less Likely
High CVE-2025-59208 Windows MapUrlToZone Information Disclosure 7.1 0.0050 Exploitation Less Likely
High CVE-2025-25004 Microsoft PowerShell Elevation of Privilege 7.3 0.0049 Exploitation Less Likely
High CVE-2025-58732 Inbox COM Objects Remote Code Execution 7.0 0.0047 Exploitation Unlikely
High CVE-2025-58735 Inbox COM Objects Remote Code Execution 7.0 0.0047 Exploitation Unlikely
High CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege 7.8 0.0046 Exploitation Less Likely
High CVE-2025-64679 Windows DWM Core Library Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-50152 Windows Kernel Elevation of Privilege 7.8 0.0043 Exploitation Less Likely
High CVE-2025-55701 Microsoft Windows Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
High CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
High CVE-2025-58715 Microsoft Windows Speech Elevation of Privilege 8.8 0.0040 Exploitation Unlikely
High CVE-2025-58716 Microsoft Windows Speech Elevation of Privilege 8.8 0.0040 Exploitation Unlikely
High CVE-2025-59277 Windows Authentication Methods Elevation of Privilege 7.8 0.0039 Exploitation Less Likely
Showing 1 to 25 of 68 1Next