Patch days / September 2025

Microsoft Patch Tuesday — September 2025

Tuesday, 9 September 2025

Vulnerabilities: 80
Critical: 1
High: 55
Zero-days: 0
Public exploit: 4

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 1

Critical 9.8
CVE-2025-55232 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
EPSS 2.1%

Public exploit code 4

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2025-54110 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.7%
High 8.8
CVE-2025-54897 Public exploit Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 22%
High 8.8
CVE-2025-54918 Public exploit Windows NTLM Elevation of Privilege Vulnerability
EPSS 25%
High 8.8
CVE-2025-55234 Public exploit Windows SMB Elevation of Privilege Vulnerability
EPSS 21%

All vulnerabilities 80

Critical1 Show

Critical 9.8
CVE-2025-55232 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
EPSS 2.1%

High55 Show

High 8.8
CVE-2025-54110 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.7%
High 8.8
CVE-2025-54897 Public exploit Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 22%
High 8.8
CVE-2025-54918 Public exploit Windows NTLM Elevation of Privilege Vulnerability
EPSS 25%
High 8.8
CVE-2025-55234 Public exploit Windows SMB Elevation of Privilege Vulnerability
EPSS 21%
High 8.8
CVE-2025-54106 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-54113 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability
EPSS 1.4%
High 8.4
CVE-2025-54910 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53800 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53801 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54091 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54092 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54098 Windows Hyper-V Elevation of Privilege Vulnerability
EPSS 3.3%
High 7.8
CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54111 Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54894 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54895 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54896 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-54898 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-54899 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-54900 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-54902 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-54903 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-54904 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-54906 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-54907 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2025-54908 Microsoft PowerPoint Remote Code Execution Vulnerability
High 7.8
CVE-2025-54912 Windows BitLocker Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54913 Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability
High 7.8
CVE-2025-54916 Windows NTFS Remote Code Execution Vulnerability
EPSS 2.8%
High 7.8
CVE-2025-55224 Windows Hyper-V Remote Code Execution Vulnerability
High 7.8
CVE-2025-55228 Windows Graphics Component Remote Code Execution Vulnerability
High 7.8
CVE-2025-55245 Xbox Gaming Services Elevation of Privilege Vulnerability
High 7.8
CVE-2025-55316 Azure Connected Machine Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2025-55317 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
High 7.5
CVE-2025-53805 HTTP.sys Denial of Service Vulnerability
EPSS 1.5%
High 7.5
CVE-2025-54919 Windows Graphics Component Remote Code Execution Vulnerability
High 7.5
CVE-2025-55243 Microsoft OfficePlus Spoofing Vulnerability
EPSS 1.2%
High 7.4
CVE-2025-54103 Windows Management Service Elevation of Privilege Vulnerability
High 7.3
CVE-2025-54116 Windows MultiPoint Services Elevation of Privilege Vulnerability
High 7.3
CVE-2025-54911 Windows BitLocker Elevation of Privilege Vulnerability
High 7.3
CVE-2025-55236 Graphics Kernel Remote Code Execution Vulnerability
High 7.1
CVE-2025-54905 Microsoft Word Information Disclosure Vulnerability
High 7.0
CVE-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53802 Windows Bluetooth Service Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53807 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.0
CVE-2025-54093 Windows TCP/IP Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2025-54105 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.0
CVE-2025-54108 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
High 7.0
CVE-2025-54112 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
High 7.0
CVE-2025-54114 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
High 7.0
CVE-2025-54115 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.0
CVE-2025-55223 DirectX Graphics Kernel Elevation of Privilege Vulnerability

Medium24 Show

Medium 6.7
CVE-2025-53808 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Medium 6.7
CVE-2025-53810 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Medium 6.7
CVE-2025-54094 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Medium 6.7
CVE-2025-54104 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Medium 6.7
CVE-2025-54109 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Medium 6.7
CVE-2025-54915 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Medium 6.7
CVE-2025-55226 Graphics Kernel Remote Code Execution Vulnerability
Medium 6.5
CVE-2025-47997 Microsoft SQL Server Information Disclosure Vulnerability
Medium 6.5
CVE-2025-53796 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-53797 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-53798 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-53806 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-53809 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2025-54095 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-54096 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-54097 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-55225 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2025-53799 Windows Imaging Component Information Disclosure Vulnerability
Medium 5.5
CVE-2025-53803 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-53804 Windows Kernel-Mode Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2025-54901 Microsoft Excel Information Disclosure Vulnerability
Medium 4.8
CVE-2025-54101 Windows SMB Client Remote Code Execution Vulnerability
EPSS 3.1%
Medium 4.3
CVE-2025-54107 MapUrlToZone Security Feature Bypass Vulnerability
Medium 4.3
CVE-2025-54917 MapUrlToZone Security Feature Bypass Vulnerability