Microsoft · Security update · October 14, 2025

KB5066875: October 2025 security update

KB5066875, released October 14, 2025, fixes 46 CVEs across 2 products. 3 of them are being exploited (CVE-2025-24990); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV1 publicly disclosed
CVEs closed
46
1 rated Critical
Exploited
3
CVE-2025-24990
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.0651
93rd percentile

Priority of the 46 CVEs

Patch now 3 Urgent 2 High 26 Routine 15

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-24990 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0651 KEVExploited
Patch now CVE-2025-47827 Windows Secure Boot Security Feature Bypass 4.6 0.0515 KEVExploited
Patch now CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0272 KEVExploited
Urgent CVE-2016-9535 Microsoft Graphics Component Remote Code Execution 4.0 0.0473 Exploitation Unlikely
Urgent CVE-2025-24052 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0254 DisclosedMore likely
High CVE-2025-59295 Internet Explorer Remote Code Execution 8.8 0.0190 Exploitation Less Likely
High CVE-2025-58726 Windows SMB Server Elevation of Privilege 7.5 0.0104 Exploitation Less Likely
High CVE-2025-59282 Inbox COM Objects Remote Code Execution 7.0 0.0061 Exploitation Unlikely
High CVE-2025-58718 Remote Desktop Client Remote Code Execution 8.8 0.0060 Exploitation Less Likely
High CVE-2025-59208 Windows MapUrlToZone Information Disclosure 7.1 0.0050 Exploitation Less Likely
High CVE-2025-25004 Microsoft PowerShell Elevation of Privilege 7.3 0.0049 Exploitation Less Likely
High CVE-2025-58732 Inbox COM Objects Remote Code Execution 7.0 0.0047 Exploitation Unlikely
High CVE-2025-58735 Inbox COM Objects Remote Code Execution 7.0 0.0047 Exploitation Unlikely
High CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege 7.8 0.0046 Exploitation Less Likely
High CVE-2025-55701 Microsoft Windows Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
High CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
High CVE-2025-59277 Windows Authentication Methods Elevation of Privilege 7.8 0.0039 Exploitation Less Likely
High CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege 7.0 0.0035 Exploitation Less Likely
High CVE-2025-58730 Inbox COM Objects Remote Code Execution 7.0 0.0035 Exploitation Unlikely
High CVE-2025-58733 Inbox COM Objects Remote Code Execution 7.0 0.0035 Exploitation Unlikely
High CVE-2025-58736 Inbox COM Objects Remote Code Execution 7.0 0.0035 Exploitation Unlikely
High CVE-2025-59187 Windows Kernel Elevation of Privilege 7.8 0.0031 Exploitation Less Likely
High CVE-2025-55678 Windows DirectX Elevation of Privilege 7.0 0.0030 Exploitation Less Likely
High CVE-2025-59275 Windows Authentication Methods Elevation of Privilege 7.8 0.0028 Exploitation Less Likely
High CVE-2025-59278 Windows Authentication Methods Elevation of Privilege 7.8 0.0028 Exploitation Less Likely
Showing 1 to 25 of 46 1Next