October 14, 2025—KB5066874 (Monthly Rollup)

None None...

September 9, 2025—KB5065428 (OS Build 17763.7792)

None None...

October 14, 2025—KB5066875 (Monthly Rollup)

None None...

October 23, 2025—KB5070887 (Monthly Rollup) Out-of-band

None None...

October 23, 2025—KB5070886 (Monthly Rollup) Out-of-band

None None...

October 23, 2025—KB5070879 (OS Build 25398.1916) Out-of-band

None None...

September 9, 2025—KB5065431 (OS Builds 22621.5909 and 22631.5909)

None None...

September 9, 2025—Hotpatch KB5065474 (OS Build 26100.6508)

None None...

September 9, 2025—Hotpatch KB5065306 (OS Build 20348.4106)

None None...

MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. MITRE created this CVE on their behalf. The documented Windows updates...

KB5066584: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 14, 2025

None None...

KB5066794: Servicing stack update for Windows Server 2012 R2: October 14, 2025

None None...

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025

None None...

IGEL OS Use of a Key Past its Expiration Date Vulnerability

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...

KB5066782: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2025)

The remote Windows host is missing security update 5066782. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066793: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (October 2025)

The remote Windows host is missing security update 5066793. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066873: Windows Server 2012 R2 Security Update (October 2025)

The remote Windows host is missing security update 5066873. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066835: Windows 11 Version 24H2 / Windows Server 2025 / Windows 11 Version 25H2 Security Update (October 2025)

The remote Windows host is missing security update 5066835. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

VulnCheck KEV: CVE-2025-47827

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...

PT-2025-41991

Name of the Vulnerable Software and Affected Versions Aruba Access Points affected versions not specified Description A security flaw allows an attacker to bypass the hardware root of trust verification, enabling the execution of modified or custom firmware on affected devices. This bypass impact...