Patch Tuesday, October 2025 ‘End of 10’ Edition

Microsoft released updates addressing 172 security holes across Windows operating systems in October 2025, including two flaws actively exploited, and the month also marks the final Patch Tuesday for Windows 10. The updates cover CVE-2025-24990, a zero-day involving the Agere Modem driver, which Microsoft removed from Windows after active attacks. A second zero-day, CVE-2025-59230, is an elevation of privilege in Windows Remote Access Connection Manager (RasMan), used to manage remote network connections.

CVE-2025-59227 and CVE-2025-59234 are remote code execution bugs tied to Preview Pane in Microsoft Office that could be triggered by simply previewing a malicious email document. CVE-2025-59287 is a critical WSUS vulnerability with a threat score of 9.8/10, exploitable without authentication; Kevin Breen of Immersive warned that it could give an attacker control over the operating system.

According to Microsoft, there are no signs this WSUS weakness is being exploited yet, and the article notes options for Windows 10 users, including ESU and alternative OS paths.