Week: 2025-W37

386 advisories • Updated 2026-04-15

Windows NTFS Remote Code Execution Vulnerability

2025-09-09 CVE-2025-54916

highMicrosoft MSRC 2025-W37

Windows NTLM Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-54918

highMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-53796

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-53797

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-53798

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-53806

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-54095

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-54096

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-54097

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

2025-09-09 CVE-2025-55225

mediumMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2025-09-09 CVE-2025-54106

highMicrosoft MSRC 2025-W37

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2025-09-09 CVE-2025-54113

highMicrosoft MSRC 2025-W37

Windows SMB Client Remote Code Execution Vulnerability

2025-09-09 CVE-2025-54101

mediumMicrosoft MSRC 2025-W37

Windows SMB Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-55234

highMicrosoft MSRC 2025-W37

Windows TCP/IP Driver Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-54093

highMicrosoft MSRC 2025-W37

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-54913

highMicrosoft MSRC 2025-W37

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-54111

highMicrosoft MSRC 2025-W37

x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper

2025-09-09 CVE-2025-39681

mediumMicrosoft MSRC 2025-W37

x86/MCE: Always save CS register on AMD Zen IF Poison errors

2025-09-09 CVE-2023-53438

mediumMicrosoft MSRC 2025-W37

x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

2025-09-09 CVE-2025-39845

mediumMicrosoft MSRC 2025-W37

x86/vmscape: Add conditional IBPB mitigation

2025-09-09 CVE-2025-40300

mediumMicrosoft MSRC 2025-W37

Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability

2025-09-09 CVE-2025-55242

mediumMicrosoft MSRC 2025-W37

Xbox Gaming Services Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-55245

highMicrosoft MSRC 2025-W37

xfrm: Duplicate SPI Handling

2025-09-09 CVE-2025-39797

mediumMicrosoft MSRC 2025-W37

xfs: do not propagate ENODATA disk errors into xattr code

2025-09-09 CVE-2025-39835

mediumMicrosoft MSRC 2025-W37

xsk: check IFF_UP earlier in Tx path

2025-09-09 CVE-2023-53240

mediumMicrosoft MSRC 2025-W37