Microsoft Patch Tuesday fixes 80 flaws as Windows 10 ends support

Microsoft on Patch Tuesday released security updates addressing roughly 80 vulnerabilities across Windows, Office, Edge, Azure and other products, including two publicly disclosed zero day flaws and a separately flagged remote code execution bug that Microsoft called the most severe of the month. The fixes were issued as organizations approach the Oct. 14, 2025 deadline when Microsoft will end support for Windows 10, a timing experts said heightens the urgency to patch and to plan upgrades.

Microsoft said its updates remedied eight vulnerabilities rated Critical and the remainder rated Important. Reports counted either 80 or 81 distinct flaws, a minor discrepancy that appears to reflect different tallies of browser or component issues. Two vulnerabilities that have been publicly disclosed but not observed in active exploitation are CVE-2025-55234, an SMB server elevation of privilege vulnerability with a CVSS score of 8.8, and CVE-2024-21907, an earlier disclosure affecting Newtonsoft.Json used by SQL Server with a CVSS score of 7.5. Microsoft characterized the set of flaws as generally having a low likelihood of exploitation, while outside researchers highlighted several...