Microsoft · ServicingStack update · September 9, 2025

KB5065431: September 2025 cumulative update for Windows 11 22H2

KB5065431, released September 9, 2025, fixes 50 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
50
8 rated Critical
Exploited
0
None reported
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.2528
97th percentile

Priority of the 50 CVEs

Patch now 0 Urgent 16 High 25 Routine 9

Applies to

Product
Windows 11 Version 22H2 for ARM64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-54918 Windows NTLM Elevation of Privilege 8.8 0.2528 More likely
Urgent CVE-2025-55234 Windows SMB Elevation of Privilege 8.8 0.2076 DisclosedMore likely
Urgent CVE-2025-54110 Windows Kernel Elevation of Privilege 8.8 0.0472 More likely
Urgent CVE-2025-54098 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0332 More likely
Urgent CVE-2025-54916 Windows NTFS Remote Code Execution 7.8 0.0278 More likely
Urgent CVE-2025-59502 Windows Remote Procedure Call Denial of Service 7.5 0.0106 More likely
Urgent CVE-2025-53799 Windows Imaging Component Information Disclosure 5.5 0.0084 Exploitation Unlikely
Urgent CVE-2025-53803 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-53804 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-48807 Role: Windows Hyper-V Remote Code Execution 6.7 0.0058 Exploitation Less Likely
Urgent CVE-2025-55226 Graphics Kernel Remote Code Execution 6.7 0.0053 Exploitation Less Likely
Urgent CVE-2025-53800 Microsoft Graphics Component Elevation of Privilege 7.8 0.0050 Exploitation Less Likely
Urgent CVE-2025-55236 Graphics Kernel Remote Code Execution 7.3 0.0043 Exploitation Less Likely
Urgent CVE-2025-54093 Windows TCP/IP Elevation of Privilege 7.0 0.0038 More likely
Urgent CVE-2025-55224 Windows Win32K - GRFX Remote Code Execution 7.8 0.0036 Exploitation Less Likely
Urgent CVE-2025-55228 Windows Win32K - GRFX Remote Code Execution 7.8 0.0033 Exploitation Less Likely
High CVE-2025-53805 Windows Internet Information Services Denial of Service 7.5 0.0151 Exploitation Unlikely
High CVE-2025-54911 Windows BitLocker Elevation of Privilege 7.3 0.0077 Exploitation Less Likely
High CVE-2025-54912 Windows BitLocker Elevation of Privilege 7.8 0.0054 Exploitation Less Likely
High CVE-2025-54116 Windows MultiPoint Services Elevation of Privilege 7.3 0.0053 Exploitation Unlikely
High CVE-2025-53801 Windows DWM Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54091 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54894 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54115 Role: Windows Hyper-V Elevation of Privilege 7.0 0.0042 Exploitation Less Likely
Showing 1 to 25 of 50 1Next