Microsoft · Security update · September 9, 2025
KB5065468: September 2025 security update
KB5065468, released September 9, 2025, fixes 30 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
Urgent1 publicly disclosedUnsupported product
CVEs closed
30
3 rated Critical
Exploited
0
None reported
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.2528
97th percentile
Priority of the 30 CVEs
Patch now 0
Urgent 8
High 6
Routine 16
Applies to
| Product |
|---|
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-54918 | Windows NTLM | Elevation of Privilege | 8.8 | 0.2528 | More likely |
| Urgent | CVE-2025-55234 | Windows SMB | Elevation of Privilege | 8.8 | 0.2076 | DisclosedMore likely |
| Urgent | CVE-2025-54110 | Windows Kernel | Elevation of Privilege | 8.8 | 0.0472 | More likely |
| Urgent | CVE-2025-54098 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0332 | More likely |
| Urgent | CVE-2025-54916 | Windows NTFS | Remote Code Execution | 7.8 | 0.0278 | More likely |
| Urgent | CVE-2025-53799 | Windows Imaging Component | Information Disclosure | 5.5 | 0.0084 | Exploitation Unlikely |
| Urgent | CVE-2025-55226 | Graphics Kernel | Remote Code Execution | 6.7 | 0.0053 | Exploitation Less Likely |
| Urgent | CVE-2025-54093 | Windows TCP/IP | Elevation of Privilege | 7.0 | 0.0038 | More likely |
| High | CVE-2025-54113 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0094 | Exploitation Unlikely |
| High | CVE-2025-54911 | Windows BitLocker | Elevation of Privilege | 7.3 | 0.0077 | Exploitation Less Likely |
| High | CVE-2025-54912 | Windows BitLocker | Elevation of Privilege | 7.8 | 0.0054 | Exploitation Less Likely |
| High | CVE-2025-54894 | Windows Local Security Authority Subsystem Service (LSASS) | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-54099 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0038 | Exploitation Less Likely |
| High | CVE-2025-54895 | Windows SPNEGO Extended Negotiation | Elevation of Privilege | 7.8 | 0.0029 | Exploitation Less Likely |
| Routine | CVE-2025-55225 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0126 | Exploitation Less Likely |
| Routine | CVE-2025-53796 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0120 | Exploitation Unlikely |
| Routine | CVE-2025-53797 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0120 | Exploitation Unlikely |
| Routine | CVE-2025-53798 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0120 | Exploitation Unlikely |
| Routine | CVE-2025-53806 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0120 | Exploitation Unlikely |
| Routine | CVE-2025-54095 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0120 | Exploitation Unlikely |
| Routine | CVE-2025-54096 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0120 | Exploitation Unlikely |
| Routine | CVE-2025-54097 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0120 | Exploitation Unlikely |
| Routine | CVE-2025-54107 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0096 | Exploitation Less Likely |
| Routine | CVE-2025-54917 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0095 | Exploitation Less Likely |
| Routine | CVE-2025-54104 | Windows Defender Firewall Service | Elevation of Privilege | 6.7 | 0.0051 | Exploitation Less Likely |
Showing 1 to 25 of 30
1Next