Microsoft November 2025 Patch Tuesday Fixes 63 New Vulnerabilities Including 1 Actively Exploited Zero-Day

Microsoft’s November 2025 Patch Tuesday update addresses 63 security vulnerabilities across its software product portfolio, including one actively exploited zero-day flaw. The update features critical patches for remote code execution and privilege escalation vulnerabilities that pose significant threat risks, urging users and organizations to promptly apply the fixes.​

November 11, 2025 Patch Tuesday Security Vulnerabilities Fixed

As reported by Bleeping Computer, Microsoft’s November 2025 Patch Tuesday fixed 63 vulnerabilities in total, of which five are rated “Critical” severity. Among these critical patches are remote code execution (RCE) flaws and elevation of privilege (EoP) issues that attackers commonly exploit to gain control or move laterally within systems.

• The most concerning flaw is CVE-2025-62215, a zero-day vulnerability in the Windows Kernel allowing local privilege escalation through a race condition. It is the only actively exploited zero-day observed “in the wild,” making it urgent for all Windows users to install this update.​

• Other critical flaws include a remote code execution vulnerability in GDI+ (graphics component), which can be triggered by opening a malicious document or uploading a crafted metafile, and additional elevation of privilege bugs impacting Windows components.​

• The update also fixes 29 elevation of privilege vulnerabilities, 16 remote code execution bugs, 11 information disclosure issues, 3 denial-of-service vulnerabilities, and various spoofing and security bypass flaws across Windows, Office, Azure, Visual Studio, and related products.​

Broad Product Coverage

This Patch Tuesday release touches multiple Microsoft technologies:

• Windows Kernel, GDI+, and Windows components including License Manager and Speech Recognition.

• Microsoft Office suite components like Excel.

• Azure components such as the Monitor Agent.

• Developer tools including Visual Studio and GitHub Copilot.

• Dynamics 365 products are affected by spoofing and cross-site scripting vulnerabilities.​

Additional Features and Fixes for Windows 11

Beyond security, Microsoft released Windows 11 updates (KB5068861 and KB5067112) introducing UI improvements like a redesigned Start menu and better battery icon behavior, plus fixes for Task Manager bugs. These cumulative updates enhance system stability alongside security reinforcement.​

Extended Security Updates for Windows 10

Noteworthy in this Patch Tuesday is the release of the first Extended Security Update (ESU) for Windows 10 (KB5068781), available after support ended last month. This allows Windows 10 users requiring continued security patches to maintain protection, though migration to Windows 11 remains recommended.​

Importance of Immediate Patching

With 63 vulnerabilities patched, including a zero-day actively exploited, this Patch Tuesday, Microsoft stresses onboarding these updates rapidly to minimize attack surface exposure. The rapidly evolving threat landscape and demonstrated exploitation necessitate a proactive patch management approach.​

Summary of Vulnerability Counts by Type

Don’t forget to check out other Microsoft news happening today, including Microsoft’s $10 Billion AI Data Center in Portugal: Leading Europe’s $16B AI Infrastructure Boom and see what BlueCodeAgent is doing for AI Code Security. This month’s Patch Tuesday underscores Microsoft’s continued commitment to fixing emerging threats across its wide product ecosystem to protect users from sophisticated cyberattacks.​ For more Patch Tuesday coverage, check out our dedicated page.