Patch Tuesday, October 2025 ‘End of 10’ Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-59287+2 related CVEs | Deserialization RCE in Microsoft WSUS (Windows Server) | 9.8 group max | 100% | KEVPoC | KEV |
CVE-2025-59234+1 related CVE | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | 7.8 | <1% |
From the original article
5 min read at krebsonsecurity.comMicrosoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October’s Patch Tuesday also marks the final month that Microsoft will ship security updates for Windows 10 systems.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.