Microsoft Patch Tuesday November 2025: Fixes 63 vulnerabilities

Microsoft has released its new security update package for November 2025, the so-called Patch Tuesday . The new update includes fixes for a total of 63 vulnerabilities , one of which is an actively exploited zero-day vulnerability in the Windows kernel – a fact that has raised alarm among cybersecurity experts.

Four "Critical" vulnerabilities and dozens of fixes

Of the 63 vulnerabilities, four are rated “Critical” by Microsoft due to their severity and level of risk. Two of them are related to remote code execution (RCE), one involves elevation of privilege, while the fourth allows disclosure of sensitive information.

See also: Zoom patches multiple serious vulnerabilities

The vulnerability categorization shows the range of issues facing the Windows ecosystem:

• 29 vulnerabilities that allow elevation of privilege
• 16 vulnerabilities that allow remote code execution
• 11 vulnerabilities that allow information disclosure
• 3 vulnerabilities that allow Denial of Service (DoS) attacks
• 2 vulnerabilities that allow bypassing security features
• 2 vulnerabilities that allow spoofing

It is worth noting that the above does not include fixes for Microsoft Edge and Mariner OS, which were released earlier in the month.

The first major update for Windows 10

In addition to the classic Patch Tuesday, yesterday we also had the launch of the first Extended Security Update (ESU) for Windows 10.As the popular operating system has now entered the unsupported phase, users who are still using it are encouraged to upgrade to Windows 11 or enroll in the ESU program to continue receiving critical updates.

See also: QNAP: Fixed vulnerabilities revealed at Pwn2Own Ireland 2025

Microsoft acknowledged, however, that some users were experiencing problems enrolling in the ESU program and, in response, released an out-of-band patchto resolve the bug that was preventing the activation process.

Patch Tuesday November 2025: Zero-day vulnerability fix

The most concerning issue this month is undoubtedly the actively exploited zero-day vulnerability CVE -2025-62215, which was discovered in the Windows kernel. Microsoft describes the flaw as that vulnerability an elevation of privilege could allow an attacker to gain SYSTEM privileges, the highest level of access to a Windows system.

According to the technical details, the issue is caused by a race condition in the handling of shared resources. A malicious user who already has limited access can exploit the flaw to gain complete control of the device. Although Microsoft did not disclose the method or extent of the exploitation, the fact that the flaw has already been actively exploited indicates that it poses a serious threat to enterprise and government environments.

The company attributed the discovery of the vulnerability to the Microsoft Threat Intelligence Center (MSTIC) and the Microsoft Security Response Center (MSRC), noting that the collaboration between the two teams enabled the rapid development and release of fixes.

The importance of Patch Tuesday for cybersecurity

“Patch Tuesday” has become a tradition in the IT world, as Microsoft selects the second Tuesday of each month to release its most critical security updates. This consistency helps businesses better plan their update processes, reducing the opportunity for vulnerabilities to be exploited.

See also: Urgent Chrome update to fix vulnerabilities

At the same time, experts remind that installing updates remains the most effective defense against cyber threats. Zero-day attacks, which target previously unknown security vulnerabilities, are constantly increasing – and the speed with which patches are applied often makes the difference between a secure and a compromised organization.

All vulnerabilities fixed this month

In the table below, you can see all the vulnerabilities that Microsoft fixed this month:

Source: www.bleepingcomputer.com