Microsoft Patch Tuesday for November 2025 – Fix for 0-day and Other 62 Vulnerabilities

Microsoft’s November 2025 Patch Tuesday fixes 63 vulnerabilities across its software lineup, with one zero-day in the Windows Kernel confirmed as actively exploited in the wild. The most critical patch is for CVE-2025-62215, an Elevation of Privilege flaw in the Windows Kernel, described as exploited in active attacks and rated Important.

The update also includes five vulnerabilities rated as Critical, many of which could lead to Remote Code Execution, including CVE-2025-62199 in Microsoft Office and CVE-2025-60724 in the Graphics Component (GDI+) that allows unauthenticated RCE over a network. Additional listed flaws span Visual Studio, DirectX, Nuance PowerScribe 360, Azure Monitor Agent and other components, culminating in a wide vulnerability breakdown across Windows, Office, Azure, Visual Studio and Dynamics 365 products.

Of the 63 vulnerabilities, 57 are rated as Important, with several marked as Exploitation More Likely. The article notes that administrators should apply these patches promptly to safeguard systems.