Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-60704 | Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network | 7.5 | <1% | ||
| CVE-2025-60724 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network | 9.8 | 6% | ||
| CVE-2025-62215 | Local Privilege Escalation via Race Condition in Microsoft Windows Kernel | 7.0 | 4% | KEVPoC | KEV |
| CVE-2025-62220 | Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network | 8.8 | <1% |
From the original article
4 min read at thehackernews.com
Ravie Lakshmanan Nov 12, 2025 Vulnerability / Patch Tuesday Microsoft on Tuesday released patches for 63 new security vulnerabilities identified in its software, including one that has come under active exploitation in the wild. Of the 63 flaws, four are rated Critical and 59 are rated Important in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.