Microsoft · Security update · September 9, 2025

KB5065427: September 2025 cumulative update for Windows 10 1607

KB5065427, released September 9, 2025, fixes 45 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
45
5 rated Critical
Exploited
0
None reported
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.2528
97th percentile

Priority of the 45 CVEs

Patch now 0 Urgent 12 High 16 Routine 17

Applies to

ProductBuild after install
Windows 10 Version 1607 for 32-bit Systems14393.8422
Windows 10 Version 1607 for x64-based Systems14393.8422
Windows Server 201614393.8422
Windows Server 2016 (Server Core installation)14393.8422

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-54918 Windows NTLM Elevation of Privilege 8.8 0.2528 More likely
Urgent CVE-2025-55234 Windows SMB Elevation of Privilege 8.8 0.2076 DisclosedMore likely
Urgent CVE-2025-54110 Windows Kernel Elevation of Privilege 8.8 0.0472 More likely
Urgent CVE-2025-54098 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0332 More likely
Urgent CVE-2025-54916 Windows NTFS Remote Code Execution 7.8 0.0278 More likely
Urgent CVE-2025-53799 Windows Imaging Component Information Disclosure 5.5 0.0084 Exploitation Unlikely
Urgent CVE-2025-53803 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-53804 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-48807 Role: Windows Hyper-V Remote Code Execution 6.7 0.0058 Exploitation Less Likely
Urgent CVE-2025-55226 Graphics Kernel Remote Code Execution 6.7 0.0053 Exploitation Less Likely
Urgent CVE-2025-53800 Microsoft Graphics Component Elevation of Privilege 7.8 0.0050 Exploitation Less Likely
Urgent CVE-2025-54093 Windows TCP/IP Elevation of Privilege 7.0 0.0038 More likely
High CVE-2025-54106 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2025-54113 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0094 Exploitation Unlikely
High CVE-2025-54911 Windows BitLocker Elevation of Privilege 7.3 0.0077 Exploitation Less Likely
High CVE-2025-54912 Windows BitLocker Elevation of Privilege 7.8 0.0054 Exploitation Less Likely
High CVE-2025-54116 Windows MultiPoint Services Elevation of Privilege 7.3 0.0053 Exploitation Unlikely
High CVE-2025-53801 Windows DWM Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54091 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54894 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0038 Exploitation Less Likely
High CVE-2025-54111 Windows UI XAML Phone DatePickerFlyout Elevation of Privilege 7.8 0.0038 Exploitation Less Likely
High CVE-2025-54112 Microsoft Virtual Hard Drive Elevation of Privilege 7.0 0.0038 Exploitation Unlikely
High CVE-2025-49734 Windows PowerShell Elevation of Privilege 7.0 0.0033 Exploitation Less Likely
Showing 1 to 25 of 45 1Next