Accessibility links

Facebook   X   LinkedIn   Email

Microsoft Patches 63 Security Flaws in November Update—One Zero-Day

By: Jim Stickley and Tina Davis
November 23, 2025

It’s the second Tuesday of the month. That means that Microsoft released its November Patch Tuesday security update addressing a whopping 63 vulnerabilities across its product ecosystem. While it may seem like a lot, it actually marks a significantly lighter load than previous months. Four vulnerabilities are rated Critical while 59 are rated. The lot affects Windows (including Windows 11), Office, Azure, SQL Server, Hyper-V, and other core components.

The most alarming of them in the release is CVE-2025-62215, an actively exploited Windows Kernel elevation of privilege vulnerability that allows local attackers to gain system-level access through a race condition flaw. That sounds scary, and it is.  If exploited, this could result in data corruption or provide unauthorized access to your PC. It’s particularly dangerous because attackers often pair it with code execution bugs to completely take over systems.

Another critical threat is CVE-2025-62199, a use-after-free flaw in Microsoft Office that enables code execution when users open malicious files using the Preview Pane. This means simply scrolling through Outlook emails could trigger an attack without any user interaction beyond viewing the email message.

The updates cover vulnerabilities ranging from elevation of privilege flaws to remote code execution risks across SQL Server, Windows Hyper-V, Visual Studio, Windows Kernel, and numerous other components. Remember that support for Windows 10 ceased in October. So, unless you have the extended support plan, your operating system will not be updated to protect against any issues in this patch update. 

Everyone who uses Microsoft products should prioritize applying these patches. The time it takes now can save you far more of your time later, should an attacker find your unpatched system.



Business Email Spoofing On The Rise

Corporate Security

Business Email Spoofing On The Rise

While the headlines are focused on ransomware attacks, spoofed emails are getting sneakier and more successful. Bad actors are always finding new ways to hack their way into businesses, and spoofing email addresses are proven way of doing just that. During the first 100 days of the coronavirus outbreak, spoofing attacks increased by 30%. This type of phishing email can sneak past antivirus security and lead to data theft, fraudulent wire transfers, ransomware, BEC (business email compromise), and more. READ FULL STORY
Trinity Double-Extortion Ransomware Group Targets Healthcare

Identity Theft

Trinity Double-Extortion Ransomware Group Targets Healthcare

Healthcare is a favorite target for ransomware attacks since they disrupt hospitals and doctors and put patient well-being at risk. With so much in jeopardy, victims are likely to quickly pay the cryptocurrency ransom demand. Paying a ransom to have your organizations sensitive information returned is bad enough. But when the hacker also threatens double-extortion—publicly exposing your ransomed data if you don’t pay up, it’s even worse. That’s exactly how the hacking group behind Trinity ransomware terrorizes their victims, including the healthcare sector. READ FULL STORY
Microsoft Patches 4 Zero-Day Vulnerabilities In September Patch Tuesday

Corporate Security

Microsoft Patches 4 Zero-Day Vulnerabilities In September Patch Tuesday

In Patch Tuesday in September 2024, Microsoft released fixes for 79 issues, including patches four actively exploited zero-day vulnerabilities affecting multiple Windows components. These vulnerabilities have serious security implications for administrators and users alike. Zero-day exploit is one for which it’s known, but for which there is no fix. These are particularly dangerous since attackers often jump on those opportunities to take advantage of victims. READ FULL STORY
89 Security Issues Addressed In Microsoft Patch

Corporate Security

89 Security Issues Addressed In Microsoft Patch

It was a busy month for Microsoft developers who focus on patching issues for the Patch Tuesday updates. The August 13, 2024, Microsoft Patch Tuesday was a critical update event, addressing between 87 and 90 security-related vulnerabilities across various Microsoft products. The precise number depends on the report you read, but what is not disputed is that ten of them are for zero-day issues and patching them right away is highly suggested. READ FULL STORY
URGENT!! Time To Patch Your Windows PCs

Your Security

Video Icon URGENT!! Time To Patch Your Windows PCs

You’re probably tired of updating things all the time. However, if you are a Windows version 10 or 11 user, you should really consider not delaying the latest updates for the Microsoft operating system. A recent vulnerability with regard to using WiFi could allow an attacker to execute remote code commands to a device. And since it affects every supported version of Windows, it’s definitely getting the attention of the hacking community. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.