Oracle Releases October 2025 Patches

Oracle released its October 2025 Critical Patch Update, delivering 374 new security patches, including more than 230 fixes for vulnerabilities that are remotely exploitable without authentication. SecurityWeek notes that roughly 180 unique CVEs were identified in Oracle’s October 2025 CPU advisory, with a dozen flaws classified as critical.

The company rolled out patches across multiple product families, with Communications receiving the largest share at 73 patches (including 47 remotely exploitable flaws) and 64 patches for Communications Applications (46 of which are remotely exploitable). E-Business Suite patches followed on the heels of a prior update addressing a defect that allowed access to sensitive data, and two weeks earlier Oracle warned of a zero-day exploited by an extortion group.

Other notable patches covered Fusion Middleware, Retail Applications, MySQL, PeopleSoft, and Systems, among many more, with several products seeing substantial remotely exploitable fixes. Oracle also announced five new Solaris patches for the operating system, three of which are remotely exploitable without authentication, in the batch released this month.