Microsoft Patch Tuesday security updates for November 2025 fixed an actively exploited Windows Kernel bug

Microsoft’s November 2025 Patch Tuesday updates addressed 63 vulnerabilities across Windows and related components, including an actively exploited Windows kernel zero‑day. Four of the flaws are rated Critical and 59 are rated Important, with none publicly known at release time. Microsoft warns that the Windows Kernel Elevation of Privilege Vulnerability, CVE-2025-62215, has been under active attack and could allow an attacker to gain SYSTEM privileges by triggering a race condition in the kernel.

The patch also fixes an Office Remote Code Execution Vulnerability, CVE-2025-62199, described as a use‑after‑free in Microsoft Office that could let an unauthorised attacker run code locally. According to ZDI, this drop is notable for being smaller than last month’s CVE total, and it marks a shift in the cadence of fixes as Windows 10 no longer receives updates in this period.