Microsoft · ServicingStack update · October 14, 2025

KB5066780: October 2025 cumulative update for Windows Server 23H2

KB5066780, released October 14, 2025, fixes 114 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1913). 3 of them are being exploited (CVE-2025-24990); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
114
2 rated Critical
Exploited
3
CVE-2025-24990
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.0651
93rd percentile

Priority of the 114 CVEs

Patch now 3 Urgent 11 High 60 Routine 40

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.1913

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-24990 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0651 KEVExploited
Patch now CVE-2025-47827 Windows Secure Boot Security Feature Bypass 4.6 0.0515 KEVExploited
Patch now CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0272 KEVExploited
Urgent CVE-2025-55681 Windows DWM Elevation of Privilege 7.0 0.0550 More likely
Urgent CVE-2016-9535 Microsoft Graphics Component Remote Code Execution 4.0 0.0473 Exploitation Unlikely
Urgent CVE-2025-59199 Software Protection Platform (SPP) Elevation of Privilege 7.8 0.0455 More likely
Urgent CVE-2025-55692 Windows Error Reporting Elevation of Privilege 7.8 0.0363 More likely
Urgent CVE-2025-55694 Windows Error Reporting Elevation of Privilege 7.8 0.0325 More likely
Urgent CVE-2025-59194 Windows Kernel Elevation of Privilege 7.0 0.0285 More likely
Urgent CVE-2025-24052 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0254 DisclosedMore likely
Urgent CVE-2025-58722 Windows DWM Elevation of Privilege 7.8 0.0234 More likely
Urgent CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege 7.4 0.0223 More likely
Urgent CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege 9.9 0.0126 Exploitation Less Likely
Urgent CVE-2025-55680 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.0044 More likely
High CVE-2025-59295 Internet Explorer Remote Code Execution 8.8 0.0190 Exploitation Less Likely
High CVE-2025-54957 Microsoft Windows Codecs Library Remote Code Execution 7.0 0.0160 Exploitation Less Likely
High CVE-2025-59254 Windows DWM Core Library Elevation of Privilege 7.8 0.0114 Exploitation Unlikely
High CVE-2025-58726 Windows SMB Server Elevation of Privilege 7.5 0.0104 Exploitation Less Likely
High CVE-2025-55326 Connected Devices Platform Service (Cdpsvc) Remote Code Execution 7.5 0.0084 Exploitation Less Likely
High CVE-2025-59200 Data Sharing Service Client Spoofing 7.7 0.0081 Exploitation Less Likely
High CVE-2025-59282 Inbox COM Objects Remote Code Execution 7.0 0.0061 Exploitation Unlikely
High CVE-2025-58718 Remote Desktop Client Remote Code Execution 8.8 0.0060 Exploitation Less Likely
High CVE-2025-59208 Windows MapUrlToZone Information Disclosure 7.1 0.0050 Exploitation Less Likely
High CVE-2025-25004 Microsoft PowerShell Elevation of Privilege 7.3 0.0049 Exploitation Less Likely
High CVE-2025-58732 Inbox COM Objects Remote Code Execution 7.0 0.0047 Exploitation Unlikely
Showing 1 to 25 of 114 1Next