Patch Tuesday

November 2025

On the second Tuesday of each month Microsoft, Adobe, SAP, Siemens and Schneider Electric publish in bulk; Oracle on the third Tuesday of January, April, July and October. Records published that day, from our own database, sorted by action score: KEV and mature exploits first.

How it is computed: CNA stamp + publication date (two-day window, UTC). No claim of a one-to-one match with the vendor bulletin; out-of-band updates land on other days.

107 records · 2 KEV

Affecting your stack

This month's records that match the products and versions in your stack.

Microsoft · November 11

63 · 2 KEV · 1 critical

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
62This week	CVE-2025-60710Weaponized	Host Process for Windows Tasks Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-59 Local privilege escalation	High7.8	KEV	4.6%	Nov 11, 2025
59Plan	CVE-2025-62215Weaponized	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-362 Local privilege escalation Race condition	High7.0	KEV	4.4%	Nov 11, 2025
41Plan	CVE-2025-60724No exploit	GDI+ Remote Code Execution Vulnerabilitymicrosoft · 365 copilot · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	6.2%	Nov 11, 2025
35Monitor	CVE-2025-59499No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2016 · CWE-89 SQL injection	High8.8	—	1.1%	Nov 11, 2025
35Monitor	CVE-2025-62220No exploit	Windows Subsystem for Linux GUI Remote Code Execution Vulnerabilitymicrosoft · windows subsystem for linux · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.7%	Nov 11, 2025
35Monitor	CVE-2025-62222Proof of concept	Agentic AI and Visual Studio Code Remote Code Execution Vulnerabilitymicrosoft · github copilot chat · CWE-20 pre-auth RCE Command injection	High8.8	—	0.8%	Nov 11, 2025
34Monitor	CVE-2025-62210No exploit	Dynamics 365 Field Service (online) Spoofing Vulnerabilitymicrosoft · dynamics 365 · CWE-79 XSS	High8.7	—	0.6%	Nov 11, 2025
34Monitor	CVE-2025-62211No exploit	Dynamics 365 Field Service (online) Spoofing Vulnerabilitymicrosoft · dynamics 365 · CWE-79 XSS	High8.7	—	0.6%	Nov 11, 2025
33Monitor	CVE-2025-62204No exploit	Microsoft SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 RCE Deserialization	High8.0	—	2.2%	Nov 11, 2025
32Monitor	CVE-2025-30398No exploit	Nuance PowerScribe 360 Information Disclosure Vulnerabilitymicrosoft · nuance powerscribe 360 · CWE-862 Pre-auth Broken access control (IDOR)	High8.1	—	0.8%	Nov 11, 2025
32Monitor	CVE-2025-59512No exploit	Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	3.1%	Nov 11, 2025
32Monitor	CVE-2025-60705No exploit	Windows Client-Side Caching Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	2.5%	Nov 11, 2025

CVE-2025-60710
62This week
Host Process for Windows Tasks Elevation of Privilege Vulnerability
HighCVSS 7.8KEVWeaponizedEPSS 4%
- Local privilege escalation
microsoft · windows 11 24h2Nov 11, 2025
CVE-2025-62215
59Plan
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0KEVWeaponizedEPSS 4%
- Local privilege escalation
- Race condition
microsoft · windows 10 1809Nov 11, 2025
CVE-2025-60724
41Plan
GDI+ Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 6%
- pre-auth RCE
- Memory safety
microsoft · 365 copilotNov 11, 2025
CVE-2025-59499
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
microsoft · sql server 2016Nov 11, 2025
CVE-2025-62220
35Monitor
Windows Subsystem for Linux GUI Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows subsystem for linuxNov 11, 2025
CVE-2025-62222
35Monitor
Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
HighCVSS 8.8Proof of conceptEPSS 0%
- pre-auth RCE
- Command injection
microsoft · github copilot chatNov 11, 2025
CVE-2025-62210
34Monitor
Dynamics 365 Field Service (online) Spoofing Vulnerability
HighCVSS 8.7No exploitEPSS 0%
- XSS
microsoft · dynamics 365Nov 11, 2025
CVE-2025-62211
34Monitor
Dynamics 365 Field Service (online) Spoofing Vulnerability
HighCVSS 8.7No exploitEPSS 0%
- XSS
microsoft · dynamics 365Nov 11, 2025
CVE-2025-62204
33Monitor
Microsoft SharePoint Remote Code Execution Vulnerability
HighCVSS 8.0No exploitEPSS 2%
- RCE
- Deserialization
microsoft · sharepoint serverNov 11, 2025
CVE-2025-30398
32Monitor
Nuance PowerScribe 360 Information Disclosure Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
microsoft · nuance powerscribe 360Nov 11, 2025
CVE-2025-59512
32Monitor
Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 3%
- Local privilege escalation
- Broken access control (IDOR)
microsoft · windows 10 1607Nov 11, 2025
CVE-2025-60705
32Monitor
Windows Client-Side Caching Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 2%
- Local privilege escalation
- Broken access control (IDOR)
microsoft · windows 10 1607Nov 11, 2025

+51 moreAll records of the vendor

Adobe · November 11

29 · 0 KEV · 0 critical

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2025-61814No exploit	InDesign Desktop \| Use After Free (CWE-416)adobe · indesign · CWE-416 RCE Memory safety	High7.8	—	0.2%	Nov 11, 2025
31Monitor	CVE-2025-61815No exploit	InDesign Desktop \| Use After Free (CWE-416)adobe · indesign · CWE-416 RCE Memory safety	High7.8	—	0.2%	Nov 11, 2025
31Monitor	CVE-2025-61816No exploit	InCopy \| Heap-based Buffer Overflow (CWE-122)adobe · incopy · CWE-122 RCE Memory safety	High7.8	—	0.2%	Nov 11, 2025
31Monitor	CVE-2025-61817No exploit	InCopy \| Use After Free (CWE-416)adobe · incopy · CWE-416 RCE Memory safety	High7.8	—	0.2%	Nov 11, 2025
31Monitor	CVE-2025-61818No exploit	InCopy \| Use After Free (CWE-416)adobe · incopy · CWE-416 RCE Memory safety	High7.8	—	0.2%	Nov 11, 2025
31Monitor	CVE-2025-61819No exploit	Photoshop Desktop \| Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 RCE Memory safety	High7.8	—	0.3%	Nov 11, 2025
31Monitor	CVE-2025-61820No exploit	Illustrator \| Heap-based Buffer Overflow (CWE-122)adobe · illustrator · CWE-122 RCE Memory safety	High7.8	—	0.3%	Nov 11, 2025
31Monitor	CVE-2025-61824No exploit	InDesign Desktop \| Heap-based Buffer Overflow (CWE-122)adobe · indesign · CWE-122 RCE Memory safety	High7.8	—	0.3%	Nov 11, 2025
31Monitor	CVE-2025-61826No exploit	Illustrator on iPad \| Integer Underflow (Wrap or Wraparound) (CWE-191)adobe · illustrator on ipad · CWE-191 RCE Memory safety	High7.8	—	0.2%	Nov 11, 2025
31Monitor	CVE-2025-61827No exploit	Illustrator on iPad \| Heap-based Buffer Overflow (CWE-122)adobe · illustrator on ipad · CWE-122 RCE Memory safety	High7.8	—	0.3%	Nov 11, 2025
31Monitor	CVE-2025-61828No exploit	Illustrator on iPad \| Out-of-bounds Write (CWE-787)adobe · illustrator on ipad · CWE-787 RCE Memory safety	High7.8	—	0.2%	Nov 11, 2025
31Monitor	CVE-2025-61829No exploit	Illustrator on iPad \| Heap-based Buffer Overflow (CWE-122)adobe · illustrator on ipad · CWE-122 RCE Memory safety	High7.8	—	0.3%	Nov 11, 2025

CVE-2025-61814
31Monitor
InDesign Desktop | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · indesignNov 11, 2025
CVE-2025-61815
31Monitor
InDesign Desktop | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · indesignNov 11, 2025
CVE-2025-61816
31Monitor
InCopy | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · incopyNov 11, 2025
CVE-2025-61817
31Monitor
InCopy | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · incopyNov 11, 2025
CVE-2025-61818
31Monitor
InCopy | Use After Free (CWE-416)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · incopyNov 11, 2025
CVE-2025-61819
31Monitor
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · photoshopNov 11, 2025
CVE-2025-61820
31Monitor
Illustrator | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · illustratorNov 11, 2025
CVE-2025-61824
31Monitor
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · indesignNov 11, 2025
CVE-2025-61826
31Monitor
Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · illustrator on ipadNov 11, 2025
CVE-2025-61827
31Monitor
Illustrator on iPad | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · illustrator on ipadNov 11, 2025
CVE-2025-61828
31Monitor
Illustrator on iPad | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · illustrator on ipadNov 11, 2025
CVE-2025-61829
31Monitor
Illustrator on iPad | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · illustrator on ipadNov 11, 2025

+17 moreAll records of the vendor

SAP · November 11

0 · 0 KEV · 0 critical

No records in this window.

Siemens · November 11

12 · 0 KEV · 0 critical

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2024-32008No exploit	A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).siemens · spectrum power 4 · CWE-648 Local privilege escalation	High8.5	—	0.1%	Nov 11, 2025
34Monitor	CVE-2024-32009No exploit	A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).siemens · spectrum power 4 · CWE-266 Local privilege escalation	High8.5	—	0.1%	Nov 11, 2025
34Monitor	CVE-2024-32010No exploit	A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).siemens · spectrum power 4 · CWE-732 Local privilege escalation	High8.5	—	0.1%	Nov 11, 2025
34Monitor	CVE-2024-32011No exploit	A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).siemens · spectrum power 4 · CWE-829	High8.7	—	0.4%	Nov 11, 2025
34Monitor	CVE-2025-40744No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11).siemens · solid edge se2025 · CWE-295 Pre-auth Weak crypto	High8.7	—	0.2%	Nov 11, 2025
34Monitor	CVE-2025-40763No exploit	A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).siemens · altair grid engine · CWE-427 RCE Local privilege escalation	High8.5	—	0.1%	Nov 11, 2025
34Monitor	CVE-2025-40815No exploit	A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (siemens · logo! 12/24rce · CWE-120 Memory safety	High8.6	—	0.3%	Nov 11, 2025
34Monitor	CVE-2025-40827No exploit	A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10).siemens · siemens software center · CWE-427 RCE	High8.5	—	0.1%	Nov 11, 2025
28Monitor	CVE-2025-40816No exploit	A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (siemens · logo! 12/24rce · CWE-306 Pre-auth Auth bypass	High7.2	—	0.2%	Nov 11, 2025
28Monitor	CVE-2025-40817No exploit	A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (siemens · logo! 12/24rce · CWE-306 Pre-auth Auth bypass	High7.1	—	0.2%	Nov 11, 2025
27Monitor	CVE-2025-40760No exploit	A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).siemens · altair grid engine · CWE-209 Local privilege escalation Info leak	Medium6.8	—	0.1%	Nov 11, 2025
22Monitor	CVE-2024-32014No exploit	A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).siemens · spectrum power 4 · CWE-732 Local privilege escalation	Medium5.6	—	0.1%	Nov 11, 2025

CVE-2024-32008
34Monitor
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
siemens · spectrum power 4Nov 11, 2025
CVE-2024-32009
34Monitor
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
siemens · spectrum power 4Nov 11, 2025
CVE-2024-32010
34Monitor
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
siemens · spectrum power 4Nov 11, 2025
CVE-2024-32011
34Monitor
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).
HighCVSS 8.7No exploitEPSS 0%
siemens · spectrum power 4Nov 11, 2025
CVE-2025-40744
34Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11).
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
siemens · solid edge se2025Nov 11, 2025
CVE-2025-40763
34Monitor
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
siemens · altair grid engineNov 11, 2025
CVE-2025-40815
34Monitor
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
siemens · logo! 12/24rceNov 11, 2025
CVE-2025-40827
34Monitor
A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10).
HighCVSS 8.5No exploitEPSS 0%
- RCE
siemens · siemens software centerNov 11, 2025
CVE-2025-40816
28Monitor
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
siemens · logo! 12/24rceNov 11, 2025
CVE-2025-40817
28Monitor
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
siemens · logo! 12/24rceNov 11, 2025
CVE-2025-40760
27Monitor
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).
MediumCVSS 6.8No exploitEPSS 0%
- Local privilege escalation
- Info leak
siemens · altair grid engineNov 11, 2025
CVE-2024-32014
22Monitor
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).
MediumCVSS 5.6No exploitEPSS 0%
- Local privilege escalation
siemens · spectrum power 4Nov 11, 2025

All records of the vendor

Schneider Electric · November 11

3 · 0 KEV · 0 critical

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2025-11565No exploit	CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated systemschneider electric · powerchute™ serial shutdown · CWE-22 Path traversal	High7.3	—	0.1%	Nov 12, 2025
29Monitor	CVE-2025-11567No exploit	CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is nschneider electric · powerchute™ serial shutdown · CWE-276	High7.3	—	0.1%	Nov 12, 2025
27Monitor	CVE-2025-11566No exploit	CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network toschneider electric · powerchute™ serial shutdown · CWE-307 Pre-auth	Medium6.9	—	0.4%	Nov 12, 2025

CVE-2025-11565
29Monitor
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system
HighCVSS 7.3No exploitEPSS 0%
- Path traversal
schneider electric · powerchute™ serial shutdownNov 12, 2025
CVE-2025-11567
29Monitor
CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is n
HighCVSS 7.3No exploitEPSS 0%
schneider electric · powerchute™ serial shutdownNov 12, 2025
CVE-2025-11566
27Monitor
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
schneider electric · powerchute™ serial shutdownNov 12, 2025

All records of the vendor