{
  "fix": "KB5065430",
  "url": "https://patchblox.com/security/fix/microsoft/kb5065430",
  "summary": "KB5065430, released September 9, 2025, fixes 30 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "September 2025 cumulative update for Windows 10 1507",
  "released": "2025-09-09T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-54918, exploitation more likely",
  "supported": false,
  "cveCount": 30,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.25278,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://support.microsoft.com/help/5065430",
  "appliesTo": [
    {
      "product": "Windows 10 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-for-32-bit-systems",
      "fixedVersion": "10240.21128",
      "supported": false
    },
    {
      "product": "Windows 10 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-for-x64-based-systems",
      "fixedVersion": "10240.21128",
      "supported": false
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-54918",
      "url": "https://patchblox.com/security/cve/CVE-2025-54918",
      "title": "Windows NTLM Elevation of Privilege Vulnerability",
      "component": "Windows NTLM",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.8,
      "epss": 0.25278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-55234",
      "url": "https://patchblox.com/security/cve/CVE-2025-55234",
      "title": "Windows SMB Elevation of Privilege Vulnerability",
      "component": "Windows SMB",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.20758,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": true
    },
    {
      "cveId": "CVE-2025-54110",
      "url": "https://patchblox.com/security/cve/CVE-2025-54110",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.04717,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54098",
      "url": "https://patchblox.com/security/cve/CVE-2025-54098",
      "title": "Windows Hyper-V Elevation of Privilege Vulnerability",
      "component": "Role: Windows Hyper-V",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.03321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54916",
      "url": "https://patchblox.com/security/cve/CVE-2025-54916",
      "title": "Windows NTFS Remote Code Execution Vulnerability",
      "component": "Windows NTFS",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.02777,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-53799",
      "url": "https://patchblox.com/security/cve/CVE-2025-53799",
      "title": "Windows Imaging Component Information Disclosure Vulnerability",
      "component": "Windows Imaging Component",
      "impact": "Information Disclosure",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 5.5,
      "epss": 0.00842,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-53803",
      "url": "https://patchblox.com/security/cve/CVE-2025-53803",
      "title": "Windows Kernel Memory Information Disclosure Vulnerability",
      "component": "Windows Kernel",
      "impact": "Information Disclosure",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00661,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-53804",
      "url": "https://patchblox.com/security/cve/CVE-2025-53804",
      "title": "Windows Kernel-Mode Driver Information Disclosure Vulnerability",
      "component": "Windows Kernel",
      "impact": "Information Disclosure",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00661,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-55226",
      "url": "https://patchblox.com/security/cve/CVE-2025-55226",
      "title": "Graphics Kernel Remote Code Execution Vulnerability",
      "component": "Graphics Kernel",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 6.7,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54093",
      "url": "https://patchblox.com/security/cve/CVE-2025-54093",
      "title": "Windows TCP/IP Driver Elevation of Privilege Vulnerability",
      "component": "Windows TCP/IP",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00384,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54911",
      "url": "https://patchblox.com/security/cve/CVE-2025-54911",
      "title": "Windows BitLocker Elevation of Privilege Vulnerability",
      "component": "Windows BitLocker",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.00771,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54912",
      "url": "https://patchblox.com/security/cve/CVE-2025-54912",
      "title": "Windows BitLocker Elevation of Privilege Vulnerability",
      "component": "Windows BitLocker",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54116",
      "url": "https://patchblox.com/security/cve/CVE-2025-54116",
      "title": "Windows MultiPoint Services Elevation of Privilege Vulnerability",
      "component": "Windows MultiPoint Services",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.00533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-53801",
      "url": "https://patchblox.com/security/cve/CVE-2025-53801",
      "title": "Microsoft DWM Core Library Elevation of Privilege Vulnerability",
      "component": "Windows DWM",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00454,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54091",
      "url": "https://patchblox.com/security/cve/CVE-2025-54091",
      "title": "Windows Hyper-V Elevation of Privilege Vulnerability",
      "component": "Role: Windows Hyper-V",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00454,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54894",
      "url": "https://patchblox.com/security/cve/CVE-2025-54894",
      "title": "Local Security Authority Subsystem Service Elevation of Privilege Vulnerability",
      "component": "Windows Local Security Authority Subsystem Service (LSASS)",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00454,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54099",
      "url": "https://patchblox.com/security/cve/CVE-2025-54099",
      "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability",
      "component": "Windows Ancillary Function Driver for WinSock",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00382,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54111",
      "url": "https://patchblox.com/security/cve/CVE-2025-54111",
      "title": "Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability",
      "component": "Windows UI XAML Phone DatePickerFlyout",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00381,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54112",
      "url": "https://patchblox.com/security/cve/CVE-2025-54112",
      "title": "Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability",
      "component": "Microsoft Virtual Hard Drive",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00381,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54913",
      "url": "https://patchblox.com/security/cve/CVE-2025-54913",
      "title": "Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability",
      "component": "Windows UI XAML Maps MapControlSettings",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00296,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54895",
      "url": "https://patchblox.com/security/cve/CVE-2025-54895",
      "title": "SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability",
      "component": "Windows SPNEGO Extended Negotiation",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54101",
      "url": "https://patchblox.com/security/cve/CVE-2025-54101",
      "title": "Windows SMB Client Remote Code Execution Vulnerability",
      "component": "Windows SMBv3 Client",
      "impact": "Remote Code Execution",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.8,
      "epss": 0.03124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54107",
      "url": "https://patchblox.com/security/cve/CVE-2025-54107",
      "title": "MapUrlToZone Security Feature Bypass Vulnerability",
      "component": "Windows MapUrlToZone",
      "impact": "Security Feature Bypass",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.3,
      "epss": 0.00962,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54917",
      "url": "https://patchblox.com/security/cve/CVE-2025-54917",
      "title": "MapUrlToZone Security Feature Bypass Vulnerability",
      "component": "Windows MapUrlToZone",
      "impact": "Security Feature Bypass",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.3,
      "epss": 0.00947,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54104",
      "url": "https://patchblox.com/security/cve/CVE-2025-54104",
      "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability",
      "component": "Windows Defender Firewall Service",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.7,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54915",
      "url": "https://patchblox.com/security/cve/CVE-2025-54915",
      "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability",
      "component": "Windows Defender Firewall Service",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.7,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-53808",
      "url": "https://patchblox.com/security/cve/CVE-2025-53808",
      "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability",
      "component": "Windows Defender Firewall Service",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.7,
      "epss": 0.00478,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54109",
      "url": "https://patchblox.com/security/cve/CVE-2025-54109",
      "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability",
      "component": "Windows Defender Firewall Service",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.7,
      "epss": 0.00478,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-53810",
      "url": "https://patchblox.com/security/cve/CVE-2025-53810",
      "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability",
      "component": "Windows Defender Firewall Service",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.7,
      "epss": 0.00464,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54094",
      "url": "https://patchblox.com/security/cve/CVE-2025-54094",
      "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability",
      "component": "Windows Defender Firewall Service",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.7,
      "epss": 0.00464,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}