Microsoft has released its October 2025 Patch Tuesday updates, addressing 172 security vulnerabilities, including six actively exploited zero-days — a significant close to the month and a historic moment for Windows 10, which officially reaches end of support.
Breakdown of Fixed Vulnerabilities
- 80 — Elevation of Privilege
- 11 — Security Feature Bypass
- 31 — Remote Code Execution
- 28 — Information Disclosure
- 11 — Denial of Service
- 10 — Spoofing
Among these, eight vulnerabilities are rated “Critical”, most of which enable remote code execution or privilege escalation.
This mandatory update also includes a servicing stack update improving Azure certificate validation, input method fixes, and PowerShell Remoting stability improvements.
Highlighted Zero-Days
- CVE-2025-24990 — Windows Agere Modem Driver EoP
- Microsoft removed the vulnerable
ltmdm64.sysdriver, which attackers exploited to gain administrator privileges.
- Microsoft removed the vulnerable
- CVE-2025-59230 — Windows Remote Access Connection Manager EoP
- Allowed attackers to gain SYSTEM privileges through improper access control.
- CVE-2025-47827 — Secure Boot Bypass in IGEL OS
- Allowed bypassing signature verification for malicious root file systems.
- CVE-2025-0033 — AMD EPYC SEV-SNP RMP Corruption
- Affects Azure Confidential Computing, potentially compromising guest memory integrity.
- CVE-2025-24052 — Another Agere Modem Driver Flaw
- Impacts all Windows versions — even when modems are not actively used.
- CVE-2025-2884 — TPM 2.0 Out-of-Bounds Read (TCG)
- Could allow information disclosure or denial of service within the TPM.
End of an Era for Windows 10
This update is particularly significant as it represents the final Patch Tuesday for Windows 10, which will no longer receive free updates after October 14, 2025.
- Consumers: 1 year of Extended Security Updates (ESUs)
- Enterprise: Up to 3 years
- EMEA region: 1 year of free ESUs
Key Fixes
- Corrected Unicode and IME display issues
- Fixed PowerShell/WinRM timeouts
- Removed outdated fax modem driver (ltmdm64.sys)
- Improved Azure environment validation
- Resolved SMBv1 and Windows Autopilot issues
Microsoft confirmed there are no known issues in this release — closing Windows 10’s support lifecycle on a stable note.
🌍 Beyond Microsoft
Other major vendors have also released patches this month:
- Adobe: Critical updates across multiple products
- Cisco: Patches for IOS, UCM, and Cyber Vision Center
- Ivanti: Fixes for EPMM and Neurons for MDM
- Oracle: Patches for exploited E-Business Suite flaws
- SAP: Updates for NetWeaver RCE vulnerabilities
- Synacor: Fix for a Zimbra zero-day data theft exploit
Alcaeus Services Insight
The October 2025 Patch Tuesday highlights how coordinated patch management is more critical than ever — especially as legacy systems like Windows 10 reach their end-of-life.
At Alcaeus Services, we help organizations stay ahead of vulnerabilities through automated patch orchestration, vulnerability prioritization, and threat intelligence integration across hybrid environments.
