Microsoft Patch Tuesday — November 2025
Tuesday, 11 November 2025
Exploited 2
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 7.8
CVE-2025-60710 Exploited Public exploit Host Process for Windows Tasks Elevation of Privilege VulnerabilityEPSS 4.6%
- High 7.0 EPSS 4.5%
Critical 1
- Critical 9.8 EPSS 6.3%
Public exploit code 3
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 8.8
- High 7.8
-
High 7.0
CVE-2025-60719 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 1.9%
All vulnerabilities 63
Critical1 ShowHide
- Critical 9.8 EPSS 6.3%
High46 ShowHide
-
High 7.8
CVE-2025-60710 Exploited Public exploit Host Process for Windows Tasks Elevation of Privilege VulnerabilityEPSS 4.6%
- High 7.0 EPSS 4.5%
- High 8.8
- High 8.8 EPSS 1.2%
- High 8.8
- High 8.7
- High 8.7
- High 8.1
- High 8.0
- High 8.0 EPSS 2.2%
- High 8.0
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 3.2%
- High 7.8
- High 7.8
- High 7.8 EPSS 2.6%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.5
- High 7.3
- High 7.1
- High 7.1
-
High 7.0
CVE-2025-60719 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 1.9%
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0 EPSS 1.7%
- High 7.0
- High 7.0
- High 7.0
Medium16 ShowHide
- Medium 6.8
- Medium 6.7
- Medium 6.7 EPSS 1.1%
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.3
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.0
- Medium 4.3