Skip to the content
The Update Bureau
Security

KB5065432: all 59 vulnerabilities

Cumulative update for Windows Server, version 2022, September 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

59 vulnerabilities fixed
8 critical 50 important 1 moderate
VulnerabilitySeverityCVSS
Windows NTLM Elevation of Privilege Vulnerability
Critical 8.8
Windows Graphics Component Elevation of Privilege Vulnerability
Critical 7.8
Windows Hyper-V Remote Code Execution Vulnerability
Critical 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Critical 7.8
Graphics Kernel Remote Code Execution Vulnerability
Critical 7.3
Windows Hyper-V Remote Code Execution Vulnerability
Critical 6.7
Graphics Kernel Remote Code Execution Vulnerability
Critical 6.7
Windows Imaging Component Information Disclosure Vulnerability
Critical 5.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Kernel Elevation of Privilege Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows SMB Elevation of Privilege Vulnerability
Important 8.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Important 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Important 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Important 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Important 7.8
Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability
Important 7.8
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Important 7.8
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
Important 7.8
Windows BitLocker Elevation of Privilege Vulnerability
Important 7.8
Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability
Important 7.8
Windows NTFS Remote Code Execution Vulnerability
Important 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.8
HTTP.sys Denial of Service Vulnerability
Important 7.5
Windows Graphics Component Remote Code Execution Vulnerability
Important 7.5
Windows MultiPoint Services Elevation of Privilege Vulnerability
Important 7.3
Windows BitLocker Elevation of Privilege Vulnerability
Important 7.3
PowerShell Direct Elevation of Privilege Vulnerability
Important 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.0
Windows TCP/IP Driver Elevation of Privilege Vulnerability
Important 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.0
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Important 7.0
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Important 7.0
Windows Hyper-V Elevation of Privilege Vulnerability
Important 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Important 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.0
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Important 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Important 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Important 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Important 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Important 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Important 6.7
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Kernel-Mode Driver Information Disclosure Vulnerability
Important 5.5
Windows SMB Client Remote Code Execution Vulnerability
Important 4.8
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
Remote Procedure Call Denial of Service Vulnerability
Moderate 7.5