Microsoft Patch Tuesday, September 2025 Edition

Microsoft Patch Tuesday, September 2025 Edition notes that Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in Windows and related software, with 13 of those earning a critical rating, and there are no known zero‑day flaws in this month’s release. Among the critical fixes is CVE-2025-54918, a Windows NTLM vulnerability described as “Exploitation More Likely” and, according to Kev Breen of Immersive, exploitable over the network or the Internet.

Another patch, CVE-2025-55234, affects the Windows SMB client and is also listed as a privilege escalation bug that can be exploited remotely, Breen notes. CVE-2025-54916 in Windows NTFS can lead to remote code execution, though Breen emphasises it is not remotely exploitable over the network and may require user interaction or local code execution. The piece highlights that nearly half of the fixes are privilege escalation flaws, with Tenable’s Satnam Narang observing the trend for this month.

Additionally, Google and Apple released updates for their platforms, and the article points readers toward the SANS Internet Storm Center breakdown and AskWoody for patch guidance, while reminding that Windows 10 will stop receiving free security updates in two months.