Microsoft security updates
We read Microsoft's Security Update Guide every ten minutes and keep each revision of every advisory: a CVSS score that moves, an FAQ that is rewritten, an "exploited" flag that flips. Azure Linux package CVEs are left out.
Data is being collected: our import of the Security Update Guide has not reached the present yet, so the lists below are incomplete.
Patch Tuesday
All releases- November 2026 Security Updates · 10 November 2026
- October 2026 Security Updates · 13 October 2026
- September 2026 Security Updates · 8 September 2026
- August 2026 Security Updates · 11 August 2026
- July 2026 Security Updates · 14 July 2026
- June 2026 Security Updates · 9 June 2026
Exploited vulnerabilities
| CVE | Product | Severity | CVSS | Released |
|---|---|---|---|---|
| CVE-2025-62215 Windows Kernel Elevation of Privilege Vulnerability | Windows Kernel | Important | 7.0 | 11 November 2025 |
| CVE-2025-24990 Windows Agere Modem Driver Elevation of Privilege Vulnerability | Agere Windows Modem Driver | Important | 7.8 | 14 October 2025 |
| CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability | Microsoft Office SharePoint | Critical | 9.8 | 19 July 2025 |
| CVE-2025-33053 Internet Shortcut Files Remote Code Execution Vulnerability | Internet Shortcut Files | Important | 8.8 | 10 June 2025 |
| CVE-2025-32709 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock | Important | 7.8 | 13 May 2025 |
| CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability | Microsoft Scripting Engine | Important | 7.5 | 13 May 2025 |
| CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability | Windows Common Log File System Driver | Important | 7.8 | 13 May 2025 |
| CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability | Windows Common Log File System Driver | Important | 7.8 | 13 May 2025 |
| CVE-2025-30400 Microsoft DWM Core Library Elevation of Privilege Vulnerability | Windows DWM | Important | 7.8 | 13 May 2025 |
| CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege Vulnerability | Windows Common Log File System Driver | Important | 7.8 | 8 April 2025 |
| CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability | Microsoft Management Console | Important | 7.0 | 11 March 2025 |
| CVE-2025-24993 Windows NTFS Remote Code Execution Vulnerability | Windows NTFS | Important | 7.8 | 11 March 2025 |
| CVE-2025-24991 Windows NTFS Information Disclosure Vulnerability | Windows NTFS | Important | 5.5 | 11 March 2025 |
| CVE-2025-24985 Windows Fast FAT File System Driver Remote Code Execution Vulnerability | Windows Fast FAT Driver | Important | 7.8 | 11 March 2025 |
| CVE-2025-24984 Windows NTFS Information Disclosure Vulnerability | Windows NTFS | Important | 4.6 | 11 March 2025 |
| CVE-2025-24983 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Windows Win32 Kernel Subsystem | Important | 7.0 | 11 March 2025 |
| CVE-2025-24989 Microsoft Power Pages Elevation of Privilege Vulnerability | Microsoft Power Pages | Critical | 8.2 | 19 February 2025 |
| CVE-2025-21418 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Windows Ancillary Function Driver for WinSock | Important | 7.8 | 11 February 2025 |
| CVE-2025-21391 Windows Storage Elevation of Privilege Vulnerability | Windows Storage | Important | 7.1 | 11 February 2025 |
| CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability | Windows Common Log File System Driver | Important | 7.8 | 10 December 2024 |
| CVE-2024-49035 Partner.Microsoft.Com Elevation of Privilege Vulnerability | Microsoft Partner Center | Critical | 8.7 | 26 November 2024 |
| CVE-2024-43451 NTLM Hash Disclosure Spoofing Vulnerability | Windows NTLM | Important | 6.5 | 12 November 2024 |
| CVE-2024-49039 Windows Task Scheduler Elevation of Privilege Vulnerability | Windows Task Scheduler | Important | 8.8 | 12 November 2024 |
| CVE-2024-43572 Microsoft Management Console Remote Code Execution Vulnerability | Microsoft Management Console | Important | 7.8 | 8 October 2024 |
| CVE-2024-43573 Windows MSHTML Platform Spoofing Vulnerability | Windows MSHTML Platform | Moderate | 6.5 | 8 October 2024 |
Fixed in the cloud, no customer action
Vulnerabilities Microsoft fixed in its own services and published for transparency.
| CVE | Service | Severity | CVSS | Released |
|---|---|---|---|---|
| CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability | Software for Open Networking in the Cloud (SONiC) | Critical | 10.0 | 20 November 2025 |
| CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability | Azure Application Gateway | Critical | 9.8 | 20 November 2025 |
| CVE-2025-62459 Microsoft Defender Portal Spoofing Vulnerability | Microsoft Defender Portal | Critical | 8.3 | 20 November 2025 |
| CVE-2025-62207 Azure Monitor Elevation of Privilege Vulnerability | Azure Monitor | Critical | 8.6 | 20 November 2025 |
| CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability | Microsoft Office SharePoint | Critical | 9.8 | 20 November 2025 |
| CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability | Dynamics OmniChannel SDK Storage Containers | Critical | 8.8 | 20 November 2025 |
| CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability | Application Gateway | Critical | 9.4 | 20 November 2025 |
| CVE-2025-59286 Microsoft Copilot Information Disclosure Vulnerability | Microsoft Copilot | Critical | 9.3 | 9 October 2025 |
| CVE-2025-59272 Microsoft Copilot Information Disclosure Vulnerability | Microsoft Copilot | Critical | 9.3 | 9 October 2025 |
| CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability | Microsoft Copilot | Critical | 9.3 | 9 October 2025 |
| CVE-2025-59271 Redis Enterprise Elevation of Privilege Vulnerability | Redis Enterprise | Critical | 8.7 | 9 October 2025 |
| CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability | Azure Monitor | Critical | 9.3 | 9 October 2025 |
| CVE-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability | Azure PlayFab | Critical | 8.8 | 9 October 2025 |
| CVE-2025-59246 Azure Entra ID Elevation of Privilege Vulnerability | Azure Entra ID | Critical | 9.8 | 9 October 2025 |
| CVE-2025-59218 Azure Entra ID Elevation of Privilege Vulnerability | Azure Entra ID | Critical | 9.6 | 9 October 2025 |
| CVE-2025-55241 Azure Entra ID Elevation of Privilege Vulnerability | Azure Entra | Critical | 10.0 | 4 September 2025 |
| CVE-2025-55238 Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability | Dynamics 365 FastTrack Implementation Assets | Critical | 7.5 | 4 September 2025 |
| CVE-2025-54914 Azure Networking Elevation of Privilege Vulnerability | Azure - Networking | Critical | 10.0 | 4 September 2025 |
| CVE-2025-55242 Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability | Xbox | Critical | 6.5 | 4 September 2025 |
| CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability | Azure Bot Service | Critical | 9.0 | 4 September 2025 |
| CVE-2025-53795 Microsoft PC Manager Elevation of Privilege Vulnerability | Microsoft PC Manager | Critical | 9.1 | 21 August 2025 |
| CVE-2025-53763 Azure Databricks Elevation of Privilege Vulnerability | Azure Databricks | Critical | 9.8 | 21 August 2025 |
| CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability | Azure Virtual Machines | Critical | 7.9 | 12 August 2025 |
| CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability | Azure Virtual Machines | Critical | 7.7 | 12 August 2025 |
| CVE-2025-53787 Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | Microsoft 365 Copilot's Business Chat | Critical | 8.2 | 7 August 2025 |
What Microsoft changed lately
When Microsoft revises an advisory after we first captured it, the change shows up here, with the changed words on the CVE's page.
6 recent releases shown. Source: Microsoft Security Update Guide.