Microsoft · ServicingStack update · September 9, 2025

KB5065474: September 2025 cumulative update for Windows 11 24H2

KB5065474, released September 9, 2025, fixes 63 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
63
8 rated Critical
Exploited
0
None reported
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.2528
97th percentile

Priority of the 63 CVEs

Patch now 0 Urgent 16 High 30 Routine 17

Applies to

ProductBuild after install
Windows 11 Version 24H2 for ARM64-based Systems26100.6508
Windows 11 Version 24H2 for x64-based Systems26100.6508
Windows Server 202526100.6508
Windows Server 2025 (Server Core installation)26100.6508

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-54918 Windows NTLM Elevation of Privilege 8.8 0.2528 More likely
Urgent CVE-2025-55234 Windows SMB Elevation of Privilege 8.8 0.2076 DisclosedMore likely
Urgent CVE-2025-54110 Windows Kernel Elevation of Privilege 8.8 0.0472 More likely
Urgent CVE-2025-54098 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0332 More likely
Urgent CVE-2025-54916 Windows NTFS Remote Code Execution 7.8 0.0278 More likely
Urgent CVE-2025-59502 Windows Remote Procedure Call Denial of Service 7.5 0.0106 More likely
Urgent CVE-2025-53799 Windows Imaging Component Information Disclosure 5.5 0.0084 Exploitation Unlikely
Urgent CVE-2025-53803 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-53804 Windows Kernel Information Disclosure 5.5 0.0066 More likely
Urgent CVE-2025-48807 Role: Windows Hyper-V Remote Code Execution 6.7 0.0058 Exploitation Less Likely
Urgent CVE-2025-55226 Graphics Kernel Remote Code Execution 6.7 0.0053 Exploitation Less Likely
Urgent CVE-2025-53800 Microsoft Graphics Component Elevation of Privilege 7.8 0.0050 Exploitation Less Likely
Urgent CVE-2025-55236 Graphics Kernel Remote Code Execution 7.3 0.0043 Exploitation Less Likely
Urgent CVE-2025-54093 Windows TCP/IP Elevation of Privilege 7.0 0.0038 More likely
Urgent CVE-2025-55224 Windows Win32K - GRFX Remote Code Execution 7.8 0.0036 Exploitation Less Likely
Urgent CVE-2025-55228 Windows Win32K - GRFX Remote Code Execution 7.8 0.0033 Exploitation Less Likely
High CVE-2025-53805 Windows Internet Information Services Denial of Service 7.5 0.0151 Exploitation Unlikely
High CVE-2025-54106 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2025-54113 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0094 Exploitation Unlikely
High CVE-2025-54911 Windows BitLocker Elevation of Privilege 7.3 0.0077 Exploitation Less Likely
High CVE-2025-54912 Windows BitLocker Elevation of Privilege 7.8 0.0054 Exploitation Less Likely
High CVE-2025-54116 Windows MultiPoint Services Elevation of Privilege 7.3 0.0053 Exploitation Unlikely
High CVE-2025-54091 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
High CVE-2025-54894 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege 7.8 0.0045 Exploitation Less Likely
Showing 1 to 25 of 63 1Next