Skip to the content
The Update Bureau
Security

KB5066586: all 98 vulnerabilities

Cumulative update for Windows Server, version 2019, October 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

98 vulnerabilities fixed
3 exploited 2 critical 96 important
VulnerabilitySeverityCVSS
CVE-2025-24990 Exploited
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Important 7.8
CVE-2025-59230 Exploited
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Important 7.8
CVE-2025-47827 Exploited
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11
Important 4.6
Microsoft Graphics Component Elevation of Privilege Vulnerability
Critical 9.9
MITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability
Critical 4.0
Windows Speech Runtime Elevation of Privilege Vulnerability
Important 8.8
Windows Speech Runtime Elevation of Privilege Vulnerability
Important 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.8
Windows URL Parsing Remote Code Execution Vulnerability
Important 8.8
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.8
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Important 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Error Reporting Service Elevation of Privilege Vulnerability
Important 7.8
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
Important 7.8
Windows Authentication Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Windows Cryptographic Services Information Disclosure Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Important 7.8
Storport.sys Driver Elevation of Privilege Vulnerability
Important 7.8
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Important 7.8
Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Authentication Elevation of Privilege Vulnerability
Important 7.8
Windows Authentication Elevation of Privilege Vulnerability
Important 7.8
Windows Authentication Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Data Sharing Service Spoofing Vulnerability
Important 7.7
Windows Cryptographic Services Security Feature Bypass Vulnerability
Important 7.5
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
Important 7.5
Windows SMB Server Elevation of Privilege Vulnerability
Important 7.5
Windows NTFS Elevation of Privilege Vulnerability
Important 7.4
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Important 7.4
PowerShell Elevation of Privilege Vulnerability
Important 7.3
Windows MapUrlToZone Information Disclosure Vulnerability
Important 7.1
MITRE CVE-2025-54957: Integer overflow in Dolby Digital Plus audio decoder
Important 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Important 7.0
Desktop Window Manager Elevation of Privilege Vulnerability
Important 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Important 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Remote Desktop Protocol Remote Code Execution Vulnerability
Important 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Windows Management Services Elevation of Privilege Vulnerability
Important 7.0
Windows Graphics Component Denial of Service Vulnerability
Important 7.0
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Important 7.0
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Important 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.0
Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Important 7.0
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Important 6.5
Microsoft Windows File Explorer Spoofing Vulnerability
Important 6.5
NTLM Hash Disclosure Spoofing Vulnerability
Important 6.5
Microsoft Windows File Explorer Spoofing Vulnerability
Important 6.5
NTLM Hash Disclosure Spoofing Vulnerability
Important 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Important 6.5
Virtual Secure Mode Spoofing Vulnerability
Important 6.3
Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
Important 6.2
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.1
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.1
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.1
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Important 5.5
Windows Kernel Information Disclosure Vulnerability
Important 5.5
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Important 5.5
Windows Kernel Information Disclosure Vulnerability
Important 5.5
Storage Spaces Direct Information Disclosure Vulnerability
Important 5.5
Windows Kernel Information Disclosure Vulnerability
Important 5.5
Microsoft Failover Cluster Information Disclosure Vulnerability
Important 5.5
Windows Search Service Denial of Service Vulnerability
Important 5.5
Windows ETL Channel Information Disclosure Vulnerability
Important 5.5
Windows State Repository API Server File Information Disclosure Vulnerability
Important 5.5
Windows Management Services Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Push Notification Information Disclosure Vulnerability
Important 5.5
Windows Search Service Denial of Service Vulnerability
Important 5.5
Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability
Important 5.5
Windows License Manager Information Disclosure Vulnerability
Important 5.5
Windows License Manager Information Disclosure Vulnerability
Important 5.5
Windows Kernel Information Disclosure Vulnerability
Important 5.1
Windows Search Service Denial of Service Vulnerability
Important 5.0
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Important 4.7
Windows SMB Client Tampering Vulnerability
Important 3.1
Windows Taskbar Live Preview Information Disclosure Vulnerability
Important 2.1