Skip to the content
The Update Bureau

Monthly Patch Briefing

November 2025

34 updates released this month across 6 product lines · 21 Patch Tuesday · 3 out-of-band · 1 preview · 1 exploited vulnerability fixed.

Release volume

34 updates released

19 fewer than October (53), vs 43/mo in 2025.

Nov 2025
34
Oct 2025
53
2025 average
43/mo

Security flaws fixed

45 vulnerabilities

-107 flaws compared to October (152).

Nov 2025
45
Oct 2025
152
2025 average
82/mo

Critical & urgent

2 critical · 1 zero-day

4 critical in October, plus 3 out-of-band releases this month .

Nov critical
2
Oct critical
4
2025 average
6/mo

2025 Year-to-Date Trend

902 security flaws fixed across 476 updates in 2025

66 critical flaws and 23 exploited zero-days patched across the 11 published months of 2025.

Distinct security flaws fixed per month Jan – Nov 2025
November 2025
Windows 11
Monthly security update
1 out-of-band 1 preview 35 fixed 2 critical 1 exploited 1 with issues
35 fixed · 2 critical Exploited CVE-2025-62215 (Windows Kernel Elevation of Privilege Vulnerability)
Windows 10
Monthly security update
1 out-of-band 33 fixed 2 critical 1 exploited
33 fixed · 2 critical Exploited CVE-2025-62215 (Windows Kernel Elevation of Privilege Vulnerability)
Windows Server
Monthly security update
1 out-of-band 32 fixed 2 critical 1 exploited 3 with issues
32 fixed · 2 critical Exploited CVE-2025-62215 (Windows Kernel Elevation of Privilege Vulnerability)

Vulnerabilities fixed, by version

Product Version Monthly update & build Critical Important Total
Windows 11
Windows 11, version 25H2 KB5068861 26200.7171 2 32 34
Windows 11
Windows 11, version 24H2 KB5068861 26100.7171 2 32 34
Windows 11
Windows 11, version 23H2 KB5068865 22631.6199 2 31 33
Windows 10
Windows 10 Enterprise LTSC 2019 KB5068791 17763.8027 2 31 33
Windows 10
Windows 10 Enterprise LTSB 2016 KB5068864 14393.8594 1 24 25
Windows 10
Windows 10, version 22H2 KB5068781 19045.6575 2 31 33
Windows 10
Windows 10 Enterprise LTSC 2021 KB5068781 19044.6575 2 31 33
Windows Server
Windows Server 2025 KB5068861 26100.7171 2 29 31
Windows Server
Windows Server 2022 KB5068787 20348.4405 2 28 30
Windows Server
Windows Server 2019 KB5068791 17763.8027 2 30 32
Windows Server
Windows Server 2016 KB5068864 14393.8594 1 23 24
SQL Server
SQL Server 2022 KB5068406 16.0.4222.2 · 1 2
SQL Server
SQL Server 2019 KB5068404 15.0.4455.2 · 1 1
SQL Server
SQL Server 2017 KB5068402 14.0.3515.1 · 1 1
SQL Server
SQL Server 2016 KB5068400 13.0.7070.1 · 1 1
SharePoint Server
SharePoint Server Subscription Edition KB5002800 16.0.19127.20338 · 1 1
SharePoint Server
SharePoint Server 2019 KB5002803 16.0.10417.20068 · 1 1
SharePoint Server
SharePoint Server 2016 KB5002805 16.0.5526.1001 · 1 1
Office Online Server
Office Online Server KB5002801 16.0.10417.20068 · 6 6

All updates

All updates:
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Beta Channel
    Build 26220.7271

    Xbox full-screen gaming and smoother voice dictation

    Adds Xbox full-screen gaming on more PCs, point-in-time restore, and smoother voice dictation, alongside fixes and known issues.

    Package KB5070307
    Changes 3 new · 6 improved · 8 fixes
  • Windows 11 · 23H2
    Windows 11 23H2 Windows 11 23H2 Optional preview
    Preview Final update for this version Final update for this version
    KB5070312

    File Explorer clicks and Chinese-named TAR extraction addressed

    Addresses File Explorer mouse-click problems, TAR extraction failures with long Chinese names, and other issues. It is the final preview update for version 23H2; supported editions will receive only monthly security updates going forward.

    Build 22631.6276
    Replaced by KB5071417 →
  • Windows 11 · 24H2
    Windows 11 24H2 Windows 11 24H2 Out-of-band update Also for Windows Server
    Out-of-band
    KB5072359

    24H2 moves to build 26100.7178

    KB5072359 updates Windows 11, version 24H2 to build 26100.7178. It is listed as an out-of-band cumulative update.

    Build 26100.7178
  • Windows 11 · 26H1
    Windows 11 Windows 11 Insider 26H1 Insider Preview
    Experimental Channel
    Build 28000.1199

    General improvements to the overall PC experience

    Build 28000.1199 gives Canary Channel Insiders a small set of general improvements and fixes. The release notes do not name specific changes.

  • Windows Server · 2025
    Windows Server 2025 Windows Server 2025 Out-of-band update Also for Windows 11
    Out-of-band
    KB5072359

    Prevents NVMe boot failures during Server 2025 upgrades

    The out-of-band update prevents a boot failure during some upgrades from Windows Server 2022 to Windows Server 2025 on Intel C2030 systems with Samsung NVMe devices. It also improves the component that installs Windows updates.

    Build 26100.7178
    Known issues 1 open
    Replaced by KB5072033 →
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Beta Channel
    Build 26220.7262

    HD Narrator voices and structured math reading

    Build 26220.7262 for the Dev and Beta Channels gradually adds HD voices and math reading in Narrator, plus other accessibility and system changes. It also fixes several issues and has known problems on some devices.

    Package KB5070303
    Changes 4 new · 9 improved · 5 fixes
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Release Preview Channel
    Build 26200.7296

    File Explorer dark mode and fixes for Settings and the taskbar

    The Release Preview build adds File Explorer dark mode, Copilot+ PC features, and other Windows changes. It also addresses issues with Settings, the taskbar, graphics, and LSASS.

    Changes 20 new · 8 improved · 12 fixes
  • Windows 11 · 24H2
    Windows 11 Windows 11 Insider 24H2 Insider Preview
    Release Preview Channel
    Build 26100.7296

    File Explorer dark mode and camera effects for more cameras

    Brings gradual feature changes and fixes to Release Preview Insiders on Windows 11, version 24H2, including camera effects for more cameras on Copilot+ PCs and a more consistent File Explorer dark mode.

    Changes 22 new · 6 improved · 15 fixes
  • SQL Server · CU22
    SQL Server 2022 CU22 SQL Server 2022 CU22 Security update
    KB5068450

    Integration Services vulnerability fixed; parallel SESSION_CONTEXT issue remains

    CU22 updates SQL Server 2022 to build 16.0.4225.2 with 20 fixes, including a fix for CVE-2022-26907 in Integration Services. Queries using SESSION_CONTEXT can still return incorrect results or trigger access violations in parallel plans.

    Build 16.0.4225.2
    Security 1 CVE
    Known issues 1 open
    Replaced by KB5072936 →
  • Windows 11 · 24H2, 25H2
    Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update Also for Windows Server
    Zero-day
    KB5068861

    Exploited Windows kernel flaw patched; handheld battery drain fixed

    An actively exploited Windows kernel flaw is patched, along with fixes for handheld gaming battery drain and other problems. The password icon and WSL VPN issues remain listed as known issues.

    Builds 26100.7171 26200.7171
    Security 34 CVEs 2 critical 1 exploited
    Known issues 2 open
    Replaced by KB5070311 →
  • Windows 11 · 23H2
    Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day
    KB5068865

    HTTP request parsing tightened; kernel flaw exploited

    Fixes an HTTP.sys request-parsing issue and addresses 33 vulnerabilities, including an actively exploited Windows Kernel flaw. It also includes improvements to the servicing stack.

    Build 22631.6199
    Security 33 CVEs 2 critical 1 exploited
    Replaced by KB5070312 →
  • Windows 10 · 21H2, 22H2
    Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day
    KB5068781

    Closes exploited kernel flaw and fixes false support warning

    Closes 33 vulnerabilities, including the actively exploited Windows Kernel flaw CVE-2025-62215, and fixes a false end-of-support warning. Secure Boot certificates begin expiring in June 2026; Microsoft recommends reviewing its guidance and updating certificates in advance.

    Builds 19044.6575 19045.6575
    Security 33 CVEs 2 critical 1 exploited
    Replaced by KB5071546 →
  • Windows 10 · 22H2
    Windows 10 22H2 Windows 10 22H2 Out-of-band update
    Out-of-band
    KB5071959

    Consumer ESU enrollment failures addressed

    The update addresses failures in the Windows 10 Consumer ESU enrollment wizard and includes the October 14, 2025 security fixes and improvements. Secure Boot certificates have started expiring in June 2026, so affected devices should be prepared in advance.

    Build 19045.6466
  • Windows 10 · 1809
    Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day
    KB5068791

    Exploited kernel flaw patched; unexpected UAC prompts addressed

    Patches an actively exploited Windows kernel flaw and addresses unexpected User Account Control prompts in some apps, including Autodesk AutoCAD.

    Build 17763.8027
    Security 33 CVEs 2 critical 1 exploited
    Replaced by KB5071544 →
  • Windows 10 · 1607
    Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    KB5068864

    Critical GDI+ flaw fixed; unexpected app prompts addressed

    Fixes 25 security vulnerabilities, including the critical GDI+ remote-code execution flaw CVE-2025-60724. It also addresses unexpected UAC prompts for some apps, including Autodesk AutoCAD.

    Build 14393.8594
    Security 25 CVEs 1 critical
    Replaced by KB5071543 →
  • Windows Server · 2025
    Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day
    KB5068861

    Closes an exploited kernel flaw and adds post-quantum cryptography

    Fixes 31 vulnerabilities, including an exploited Windows Kernel elevation-of-privilege flaw, and adds support for two post-quantum cryptography algorithms. WSUS still does not show synchronization error details.

    Build 26100.7171
    Security 31 CVEs 2 critical 1 exploited
    Known issues 1 open
    Replaced by KB5072359 →
  • Windows Server · 2022
    Windows Server 2022 Windows Server 2022 Security update
    Zero-day
    KB5068787

    Exploited Windows kernel flaw patched; unexpected UAC prompts addressed

    The update fixes 30 vulnerabilities, including an actively exploited Windows kernel flaw, and addresses unexpected UAC prompts and HTTP request parsing behavior.

    Build 20348.4405
    Security 30 CVEs 2 critical 1 exploited
    Known issues 1 open
    Replaced by KB5071547 →
  • Windows Server · 2019
    Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day
    KB5068791

    Exploited Windows kernel flaw addressed; unexpected UAC prompts fixed

    The update addresses an actively exploited Windows kernel flaw and unexpected UAC prompts during some app repairs. It also includes security improvements and a servicing stack update.

    Build 17763.8027
    Security 32 CVEs 2 critical 1 exploited
    Replaced by KB5071544 →
  • Windows Server · 2016
    Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    KB5068864

    Critical GDI+ flaw patched; unexpected UAC prompts addressed

    Fixes 24 security vulnerabilities, including critical GDI+ remote code execution flaw CVE-2025-60724, and addresses unexpected UAC prompts for some apps, including Autodesk AutoCAD.

    Build 14393.8594
    Security 24 CVEs 1 critical
    Replaced by KB5071543 →
  • SQL Server · CU21 + GDR
    SQL Server 2022 CU21 + GDR SQL Server 2022 CU21 + GDR Security update
    KB5068406

    Multi-role security filters corrected; backup procedure flaw mitigated

    The update fixes one Important SQL Server elevation-of-privilege vulnerability, corrects a rare Row-Level Security issue, and mitigates SQL injection risk in an internal backup procedure.

    Build 16.0.4222.2
    Security 1 CVE
    Replaced by KB5072936 →
  • SQL Server · GDR
    SQL Server 2022 GDR SQL Server 2022 GDR Security update
    KB5068407

    RLS filtering enforced; backup procedure SQL injection mitigated

    Fixes a rare Analysis Services security-filtering gap and mitigates a SQL injection vulnerability in an internal backup procedure.

    Build 16.0.1160.1
    Security 1 CVE
    Replaced by KB5073031 →
  • SQL Server · CU32 + GDR
    SQL Server 2019 CU32 + GDR SQL Server 2019 CU32 + GDR Security update
    KB5068404

    SQL injection access restricted; Analysis Services filters fixed

    Addresses an SQL injection vulnerability in an internal backup procedure and fixes a rare configuration where Analysis Services security filters could be skipped.

    Build 15.0.4455.2
    Security 1 CVE
    Replaced by KB5077469 →
  • SQL Server · GDR
    SQL Server 2019 GDR SQL Server 2019 GDR Security update
    KB5068405

    Elevation-of-privilege flaw fixed; Analysis Services filters corrected

    Fixes one Important SQL Server elevation-of-privilege vulnerability, corrects rare Analysis Services security-filter behavior, and reduces SQL injection risk in an exposed backup procedure.

    Build 15.0.2155.2
    Security 1 CVE
    Replaced by KB5077470 →
  • SQL Server · CU31 + GDR
    SQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update
    KB5068402

    SQL injection protection for backup procedure; RLS filters fixed

    The update reduces SQL injection risk in an exposed backup procedure and fixes cases where row-level security filters could be skipped in certain multi-role configurations.

    Build 14.0.3515.1
    Security 1 CVE
    Replaced by KB5077471 →
  • SQL Server · GDR
    SQL Server 2017 GDR SQL Server 2017 GDR Security update
    KB5068403

    Database privilege flaw patched; row filters no longer skipped

    Addresses one Important SQL Server flaw and fixes a rare setup where database row filters could be skipped.

    Build 14.0.2095.1
    Security 1 CVE
    Replaced by KB5077472 →