Microsoft Patches 86 Vulnerabilities

Microsoft has released its September 2025 Patch Tuesday updates, addressing a total of 86 vulnerabilities across Windows and other products. According to release notes, none of the security holes patched this month have been exploited in the wild, though eight carry an exploitation more likely rating, including issues in the Windows kernel, Windows NTFS, and various privilege escalation bugs in the Windows TCP/IP driver, Hyper-V, NTLM, and SMB.

By CVSS scores, several flaws exceed 8.0, with CVE-2025-55232 described as a remote code execution issue in the High Performance Compute (HPC) pack and carrying a score of 9.8. Also noted are CVE-2025-54106 and CVE-2025-54113 (routing and remote access service), CVE-2025-54897 (SharePoint), CVE-2025-54910 (Office), and CVE-2025-55227 (SQL Server), all with high scores, though exploitation is described as less likely or unlikely.

Microsoft stresses that organisations running HPC Pack clusters should ensure they are within a trusted network secured by firewall rules, particularly for TCP port 5999.