Microsoft Patch Tuesday Fixes Actively Exploited Windows Kernel Zero-Day
Active Exploitation · 3 sources · Updated 4mo ago · First seen Nov 13, 2025
Microsoft released fixes for 63 vulnerabilities across its product portfolio, including five rated critical and one actively exploited zero-day. The exploited flaw, tracked as CVE-2025-62215, is a Windows kernel double-free race condition that enables local privilege escalation to SYSTEM without user interaction, according to Microsoft’s Security Update Guide and CSIRT.SK reporting.
The November 2025 updates also addressed additional high-severity issues spanning Windows, Microsoft Office, Visual Studio, Microsoft Graphics Component (GDI+), and Nuance PowerScribe 360, with impacts including remote code execution, information disclosure, and privilege escalation. Security advisories for vulnerabilities including CVE-2025-60716 and CVE-2025-62215 were published through Microsoft’s update channels, and defenders were urged to deploy the patches promptly because one flaw was already being exploited in the wild.
