November Patch Tuesday: Microsoft Fixes 68 Flaws, Including Kernel Zero-Day Under Active Exploitation

Microsoft’s November 2025 Patch Tuesday addresses a total of 68 vulnerabilities, including a kernel zero-day that is already being actively exploited in the wild. The updates include five critical-severity and 64 important-severity fixes across products such as SQL Server, Windows Hyper-V, Visual Studio, Windows Kernel, and Windows WLAN Service.

The most urgent patch is for CVE-2025-62215, a Windows Kernel Elevation of Privilege vulnerability, with successful exploitation potentially allowing an authenticated attacker to gain SYSTEM privileges after a race condition. In addition to the zero-day, four other flaws are rated as Critical, posing risks of Remote Code Execution or high-level Elevation of Privilege, including CVE-2025-60724 in GDI+ and CVE-2025-62199 in Microsoft Office.

The article also notes an important-severity vulnerability: CVE-2025-30398 in Nuance PowerScribe 360, which could lead to information disclosure via a missing authorisation flaw exposed over a network. IT teams are urged to prioritise these patches given the active exploitation of the Windows Kernel zero-day.