Skip to the content
The Update Bureau
Security

KB5068861: all 34 vulnerabilities

Cumulative update for Windows 11, versions 24H2 and 25H2, November 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

34 vulnerabilities fixed
1 exploited 2 critical 32 important
VulnerabilitySeverityCVSS
CVE-2025-62215 Exploited
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-60724
Windows GDI+ Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-60716
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Critical 7.0
CVE-2025-64678
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-60715
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-62452
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-59505
Windows Smart Card Reader Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-59511
Windows WLAN Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-59512
Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-59514
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60703
Windows Remote Desktop Services Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60705
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60707
Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60709
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60718
Windows Administrator Protection Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60720
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60721
Windows Administrator Protection Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60704
Windows Kerberos Elevation of Privilege Vulnerability
 Important 7.5
CVE-2025-59506
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-59507
Windows Speech Runtime Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-59508
Windows Speech Recognition Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-59515
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-60717
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-60719
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62213
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62217
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62218
Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62219
Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-60708
Storvsp.sys Driver Denial of Service Vulnerability
 Important 6.5
CVE-2025-60723
DirectX Graphics Kernel Denial of Service Vulnerability
 Important 6.3
CVE-2025-59509
Windows Speech Recognition Information Disclosure Vulnerability
 Important 5.5
CVE-2025-59510
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
 Important 5.5
CVE-2025-59513
Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2025-60706
Windows Hyper-V Information Disclosure Vulnerability
 Important 5.5