Microsoft · ServicingStack update · November 11, 2025
KB5068966: November 2025 cumulative update for Windows 11 24H2
KB5068966, released November 11, 2025, fixes 35 CVEs across 6 products. One of them is being exploited (CVE-2025-62215); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
35
1 rated Critical
Exploited
1
CVE-2025-62215
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.0629
93rd percentile
Priority of the 35 CVEs
Patch now 1
Urgent 6
High 22
Routine 6
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-62215 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0446 | KEVExploited |
| Urgent | CVE-2025-59512 | Customer Experience Improvement Program (CEIP) | Elevation of Privilege | 7.8 | 0.0314 | More likely |
| Urgent | CVE-2025-60705 | Windows Client-Side Caching (CSC) Service | Elevation of Privilege | 7.8 | 0.0258 | More likely |
| Urgent | CVE-2025-60719 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0193 | More likely |
| Urgent | CVE-2025-62213 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0172 | More likely |
| Urgent | CVE-2025-60716 | Windows DirectX | Elevation of Privilege | 7.0 | 0.0039 | Exploitation Less Likely |
| Urgent | CVE-2025-62217 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0027 | More likely |
| High | CVE-2025-60724 | Microsoft Graphics Component | Remote Code Execution | 9.8 | 0.0629 | Exploitation Less Likely |
| High | CVE-2025-64678 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0103 | Exploitation Less Likely |
| High | CVE-2025-60715 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0085 | Exploitation Unlikely |
| High | CVE-2025-62452 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0085 | Exploitation Less Likely |
| High | CVE-2025-60704 | Windows Kerberos | Elevation of Privilege | 7.5 | 0.0057 | Exploitation Less Likely |
| High | CVE-2025-60709 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0054 | Exploitation Less Likely |
| High | CVE-2025-60707 | Multimedia Class Scheduler Service (MMCSS) | Elevation of Privilege | 7.8 | 0.0053 | Exploitation Less Likely |
| High | CVE-2025-60718 | Windows Administrator Protection | Elevation of Privilege | 7.8 | 0.0044 | Exploitation Less Likely |
| High | CVE-2025-59505 | Windows Smart Card | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Less Likely |
| High | CVE-2025-60703 | Windows Remote Desktop | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Unlikely |
| High | CVE-2025-60713 | Windows Routing and Remote Access Service (RRAS) | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Unlikely |
| High | CVE-2025-60720 | Windows TDX.sys | Elevation of Privilege | 7.8 | 0.0043 | Exploitation Unlikely |
| High | CVE-2025-59511 | Windows WLAN Service | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Less Likely |
| High | CVE-2025-59514 | Microsoft Streaming Service | Elevation of Privilege | 7.8 | 0.0039 | Exploitation Unlikely |
| High | CVE-2025-60721 | Windows Administrator Protection | Elevation of Privilege | 7.8 | 0.0039 | Exploitation Less Likely |
| High | CVE-2025-59515 | Windows Broadcast DVR User Service | Elevation of Privilege | 7.0 | 0.0035 | Exploitation Less Likely |
| High | CVE-2025-60717 | Windows Broadcast DVR User Service | Elevation of Privilege | 7.0 | 0.0035 | Exploitation Less Likely |
| High | CVE-2025-59506 | Windows DirectX | Elevation of Privilege | 7.0 | 0.0026 | Exploitation Unlikely |
Showing 1 to 25 of 35
1Next