Microsoft · Security update · November 11, 2025

KB5068781: November 2025 cumulative update for Windows 10 21H2

KB5068781, released November 11, 2025, fixes 33 CVEs across 6 products. One of them is being exploited (CVE-2025-62215); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
33
1 rated Critical
Exploited
1
CVE-2025-62215
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.0629
93rd percentile

Priority of the 33 CVEs

Patch now 1 Urgent 6 High 20 Routine 6

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-62215 Windows Kernel Elevation of Privilege 7.0 0.0446 KEVExploited
Urgent CVE-2025-59512 Customer Experience Improvement Program (CEIP) Elevation of Privilege 7.8 0.0314 More likely
Urgent CVE-2025-60705 Windows Client-Side Caching (CSC) Service Elevation of Privilege 7.8 0.0258 More likely
Urgent CVE-2025-60719 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0193 More likely
Urgent CVE-2025-62213 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0172 More likely
Urgent CVE-2025-60716 Windows DirectX Elevation of Privilege 7.0 0.0039 Exploitation Less Likely
Urgent CVE-2025-62217 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0027 More likely
High CVE-2025-60724 Microsoft Graphics Component Remote Code Execution 9.8 0.0629 Exploitation Less Likely
High CVE-2025-64678 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0103 Exploitation Less Likely
High CVE-2025-60715 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0085 Exploitation Unlikely
High CVE-2025-62452 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0085 Exploitation Less Likely
High CVE-2025-60714 Windows OLE Remote Code Execution 7.8 0.0062 Exploitation Less Likely
High CVE-2025-60704 Windows Kerberos Elevation of Privilege 7.5 0.0057 Exploitation Less Likely
High CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0054 Exploitation Less Likely
High CVE-2025-60707 Multimedia Class Scheduler Service (MMCSS) Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2025-59505 Windows Smart Card Elevation of Privilege 7.8 0.0043 Exploitation Less Likely
High CVE-2025-60703 Windows Remote Desktop Elevation of Privilege 7.8 0.0043 Exploitation Unlikely
High CVE-2025-60720 Windows TDX.sys Elevation of Privilege 7.8 0.0043 Exploitation Unlikely
High CVE-2025-59511 Windows WLAN Service Elevation of Privilege 7.8 0.0040 Exploitation Less Likely
High CVE-2025-59514 Microsoft Streaming Service Elevation of Privilege 7.8 0.0039 Exploitation Unlikely
High CVE-2025-59515 Windows Broadcast DVR User Service Elevation of Privilege 7.0 0.0035 Exploitation Less Likely
High CVE-2025-60717 Windows Broadcast DVR User Service Elevation of Privilege 7.0 0.0035 Exploitation Less Likely
High CVE-2025-59506 Windows DirectX Elevation of Privilege 7.0 0.0026 Exploitation Unlikely
High CVE-2025-59507 Windows Speech Elevation of Privilege 7.0 0.0026 Exploitation Unlikely
High CVE-2025-59508 Windows Speech Elevation of Privilege 7.0 0.0026 Exploitation Unlikely
Showing 1 to 25 of 33 1Next