Microsoft · Security update · October 14, 2025

KB5066877: October 2025 security update

KB5066877, released October 14, 2025, fixes 34 CVEs across 4 products. 2 of them are being exploited (CVE-2025-24990); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
34
1 rated Critical
Exploited
2
CVE-2025-24990
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.0651
93rd percentile

Priority of the 34 CVEs

Patch now 2 Urgent 2 High 21 Routine 9

Applies to

Product
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-24990 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0651 KEVExploited
Patch now CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0272 KEVExploited
Urgent CVE-2016-9535 Microsoft Graphics Component Remote Code Execution 4.0 0.0473 Exploitation Unlikely
Urgent CVE-2025-24052 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0254 DisclosedMore likely
High CVE-2025-59295 Internet Explorer Remote Code Execution 8.8 0.0190 Exploitation Less Likely
High CVE-2025-58726 Windows SMB Server Elevation of Privilege 7.5 0.0104 Exploitation Less Likely
High CVE-2025-59282 Inbox COM Objects Remote Code Execution 7.0 0.0061 Exploitation Unlikely
High CVE-2025-58718 Remote Desktop Client Remote Code Execution 8.8 0.0060 Exploitation Less Likely
High CVE-2025-59208 Windows MapUrlToZone Information Disclosure 7.1 0.0050 Exploitation Less Likely
High CVE-2025-25004 Microsoft PowerShell Elevation of Privilege 7.3 0.0049 Exploitation Less Likely
High CVE-2025-58735 Inbox COM Objects Remote Code Execution 7.0 0.0047 Exploitation Unlikely
High CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege 7.8 0.0046 Exploitation Less Likely
High CVE-2025-55701 Microsoft Windows Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
High CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
High CVE-2025-59277 Windows Authentication Methods Elevation of Privilege 7.8 0.0039 Exploitation Less Likely
High CVE-2025-58733 Inbox COM Objects Remote Code Execution 7.0 0.0035 Exploitation Unlikely
High CVE-2025-58736 Inbox COM Objects Remote Code Execution 7.0 0.0035 Exploitation Unlikely
High CVE-2025-59187 Windows Kernel Elevation of Privilege 7.8 0.0031 Exploitation Less Likely
High CVE-2025-59275 Windows Authentication Methods Elevation of Privilege 7.8 0.0028 Exploitation Less Likely
High CVE-2025-59278 Windows Authentication Methods Elevation of Privilege 7.8 0.0028 Exploitation Less Likely
High CVE-2025-58714 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0028 Exploitation Unlikely
High CVE-2025-55335 Windows NTFS Elevation of Privilege 7.4 0.0027 Exploitation Less Likely
High CVE-2025-59196 Windows SSDP Service Elevation of Privilege 7.0 0.0027 Exploitation Unlikely
High CVE-2025-58725 Windows COM Elevation of Privilege 7.0 0.0026 Exploitation Less Likely
High CVE-2025-59205 Microsoft Graphics Component Elevation of Privilege 7.0 0.0020 Exploitation Less Likely
Showing 1 to 25 of 34 1Next