Back Feeds2.Feedburner

Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215)

Feeds2.Feedburner •Zeljka Zorz • November 12, 2025

Microsoft has delivered a rather light load of patches for November 2025 Patch Tuesday: some 60+ vulnerabilities have received a fix, among them an actively exploited Windows Kernel flaw (CVE-2025-62215). CVE-2025-62215 CVE-2025-62215 is a memory corruption issue that stems from “concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Kernel”, which that allows local elevation of privileges (to SYSTEM). Exploitation in the wild was flagged by Microsoft’s Threat Intelligence Center (MSTIC) and … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be exploited in the wild, prompting urgent attention from cybersecurity teams. 100 sources 80

Extracted Entities

CVEs (1)

CVE-2025-62215

Platforms (1)

Windows