October 23, 2025—KB5070887 (Monthly Rollup) Out-of-band

October 23, 2025—KB5070887 Monthly Rollup Out-of-band Applies To Windows Server 2012 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please...

October 14, 2025—KB5066875 (Monthly Rollup)

October 14, 2025—KB5066875 Monthly Rollup Applies To Windows Server 2012 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure al...

September 9, 2025—KB5065431 (OS Builds 22621.5909 and 22631.5909)

September 9, 2025—KB5065431 OS Builds 22621.5909 and 22631.5909 Applies To Windows 11 Enterprise and Education, version 22H2 Windows 11 version 23H2, all editions Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026...

September 9, 2025—Hotpatch KB5065474 (OS Build 26100.6508) for Windows Server

September 9, 2025—Hotpatch KB5065474 OS Build 26100.6508 for Windows Server Applies To Windows Server 2025 Datacenter: Azure Edition Note Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft...

September 9, 2025—Hotpatch KB5065306 (OS Build 20348.4106)

September 9, 2025—Hotpatch KB5065306 OS Build 20348.4106 Applies To Windows Server 2022 Datacenter: Azure Edition Note Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating...

MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. MITRE created this CVE on their behalf. The documented Windows updates...

KB5066584: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 14, 2025

KB5066584: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 14, 2025 Applies To Windows 10, version 1607, all editions Windows Server 2016 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started...

KB5066794: Servicing stack update for Windows Server 2012 R2: October 14, 2025

KB5066794: Servicing stack update for Windows Server 2012 R2: October 14, 2025 Applies To Windows Server 2012 R2 ESU Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of...

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025 Applies To Windows Server 2012 ESU Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain...

KB5066873: Windows Server 2012 R2 Security Update (October 2025)

The remote Windows host is missing security update 5066873. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066835: Windows 11 Version 24H2 / Windows Server 2025 / Windows 11 Version 25H2 Security Update (October 2025)

The remote Windows host is missing security update 5066835. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

IGEL OS Use of a Key Past its Expiration Date Vulnerability

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...

KB5066793: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (October 2025)

The remote Windows host is missing security update 5066793. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066782: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2025)

The remote Windows host is missing security update 5066782. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

CVE-2025-11577: Undefined Security Weakness

Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification. The exposure of these keys could allow attackers to sign malicious firmware that appears trusted by affected systems, undermining th...

HPE Aruba Networking EdgeConnect OS security vulnerabilities

HPE Aruba Networking EdgeConnect OS is an operating system from HPE America. A security vulnerability exists in HPE Aruba Networking EdgeConnect OS that stems from a denial-of-service attack in which a firmware binary file allows a malicious participant to permanently delete necessary boot...

PT-2025-41852

Name of the Vulnerable Software and Affected Versions Clevo UEFI firmware update packages, including B10717.exe Description The UEFI firmware update packages inadvertently included private signing keys used for Boot Guard and Boot Policy Manifest verification. Exposure of these keys could allow...

PT-2025-41991

Name of the Vulnerable Software and Affected Versions Aruba Access Points affected versions not specified Description A security flaw allows an attacker to bypass the hardware root of trust verification, enabling the execution of modified or custom firmware on affected devices. This bypass impact...

PT-2025-41983

Name of the Vulnerable Software and Affected Versions AOS firmware affected versions not specified Description A flaw exists in an AOS firmware binary that could allow a malicious, authenticated actor to permanently delete critical boot information. Exploitation of this issue can cause the system...

VulnCheck KEV: CVE-2025-47827

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...