Microsoft has released security patches to address multiple vulnerabilities in their software and products.
Microsoft has released security patches to address multiple vulnerabilities in their software and products. The vulnerabilities that have been classified as Critical in severity are listed in the table below. For the full list of security patches released by Microsoft, please refer to
CRITICAL VULNERABILITIES
Azure HorizonDB Elevation of Privilege Vulnerability
Windows Kernel Remote Code Execution Vulnerability
Nuance PowerScribe Remote Code Execution Vulnerability
HTTP.sys Remote Code Execution Vulnerability
DHCP Client Service Remote Code Execution Vulnerability
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
Microsoft Exchange Online Information Disclosure Vulnerability
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
Windows Deployment Services (WDS) Remote Code Execution
Windows Media Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Microsoft M365 Copilot Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Microsoft Graph Information Disclosure Vulnerability
M365 Copilot Information Disclosure Vulnerability
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Microsoft Office Information Disclosure Vulnerability
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
