Microsoft · Security update · November 11, 2025
KB5068864: November 2025 cumulative update for Windows 10 1607
KB5068864, released November 11, 2025, fixes 26 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
26
None rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.0629
93rd percentile
Priority of the 26 CVEs
Patch now 0
Urgent 5
High 17
Routine 4
Applies to
| Product | Build after install |
|---|---|
| Windows 10 Version 1607 for 32-bit Systems | 14393.8594 |
| Windows 10 Version 1607 for x64-based Systems | 14393.8594 |
| Windows Server 2016 | 14393.8594 |
| Windows Server 2016 (Server Core installation) | 14393.8594 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-59512 | Customer Experience Improvement Program (CEIP) | Elevation of Privilege | 7.8 | 0.0314 | More likely |
| Urgent | CVE-2025-60705 | Windows Client-Side Caching (CSC) Service | Elevation of Privilege | 7.8 | 0.0258 | More likely |
| Urgent | CVE-2025-60719 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0193 | More likely |
| Urgent | CVE-2025-62213 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0172 | More likely |
| Urgent | CVE-2025-62217 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0027 | More likely |
| High | CVE-2025-60724 | Microsoft Graphics Component | Remote Code Execution | 9.8 | 0.0629 | Exploitation Less Likely |
| High | CVE-2025-64678 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0103 | Exploitation Less Likely |
| High | CVE-2025-60715 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0085 | Exploitation Unlikely |
| High | CVE-2025-62452 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0085 | Exploitation Less Likely |
| High | CVE-2025-60714 | Windows OLE | Remote Code Execution | 7.8 | 0.0062 | Exploitation Less Likely |
| High | CVE-2025-60704 | Windows Kerberos | Elevation of Privilege | 7.5 | 0.0057 | Exploitation Less Likely |
| High | CVE-2025-60709 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0054 | Exploitation Less Likely |
| High | CVE-2025-59505 | Windows Smart Card | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Less Likely |
| High | CVE-2025-60703 | Windows Remote Desktop | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Unlikely |
| High | CVE-2025-60713 | Windows Routing and Remote Access Service (RRAS) | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Unlikely |
| High | CVE-2025-60720 | Windows TDX.sys | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Unlikely |
| High | CVE-2025-59514 | Microsoft Streaming Service | Elevation of Privilege | 7.8 | 0.0039 | Exploitation Unlikely |
| High | CVE-2025-59506 | Windows DirectX | Elevation of Privilege | 7.0 | 0.0026 | Exploitation Unlikely |
| High | CVE-2025-59507 | Windows Speech | Elevation of Privilege | 7.0 | 0.0026 | Exploitation Unlikely |
| High | CVE-2025-59508 | Windows Speech | Elevation of Privilege | 7.0 | 0.0026 | Exploitation Unlikely |
| High | CVE-2025-62218 | Microsoft Wireless Provisioning System | Elevation of Privilege | 7.0 | 0.0025 | Exploitation Less Likely |
| High | CVE-2025-62219 | Microsoft Wireless Provisioning System | Elevation of Privilege | 7.0 | 0.0025 | Exploitation Unlikely |
| Routine | CVE-2025-59510 | Windows Routing and Remote Access Service (RRAS) | Denial of Service | 5.5 | 0.0054 | Exploitation Less Likely |
| Routine | CVE-2025-59513 | Windows Bluetooth RFCOM Protocol Driver | Information Disclosure | 5.5 | 0.0051 | Exploitation Less Likely |
| Routine | CVE-2025-60706 | Role: Windows Hyper-V | Information Disclosure | 5.5 | 0.0050 | Exploitation Less Likely |
Showing 1 to 25 of 26
1Next