Patch Tuesday - September 2025

🗓️ 09 Sep 2025 20:45:52Reported by Adam BarnettType

Microsoft September 2025 Patch Tuesday fixes 176 vulnerabilities, including five critical remote code execution flaws and a SQL Server DoS (CVE-2024-21907).

Reporter	Title	Published	Views	Family All 183
GithubExploit	Exploit for Improper Authentication in Microsoft	1 Nov 202510:43	–	githubexploit
GithubExploit	Exploit for CVE-2025-54914	8 Sep 202503:33	–	githubexploit
GithubExploit	Exploit for CVE-2025-54914	12 Sep 202516:11	–	githubexploit
GithubExploit	Exploit for Improper Handling of Exceptional Conditions in Newtonsoft Json.Net	15 May 202621:41	–	githubexploit
Information Security Automation	September Microsoft Patch Tuesday	9 Sep 202520:48	–	avleonov
BDU FSTEC	The vulnerability of the JsonConvert.DeserializeObject method in the .NET Json.NET framework allows a attacker to cause a service failure.	6 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Networking component of Microsoft’s software platform allows attackers to enhance their privileges.	8 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SMB server for Windows operating systems allows attackers to increase their privileges.	10 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft HPC Pack, a high-performance computing tool, related to deserialization mechanism flaws, allows an attacker to execute arbitrary code.	10 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Xbox Gaming Services library management software lies in the incorrect handling of links before accessing files. This allows attackers to escalate their privileges.	14 Sep 202500:00	–	bdu_fstec

09 Sep 2025 20:45Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8 - 10

EPSS0.32908

SSVC