October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band

None None...

October 23, 2025—KB5070881 (OS Build 26100.6905) Out-of-band

None None...

October 14, 2025—KB5066877 (Security-only update)

None None...

October 14, 2025—KB5066876 (Security-only update)

None None...

October 14, 2025—KB5066875 (Monthly Rollup)

None None...

KB5066840: Cumulative security update for Internet Explorer: October 14, 2025

None None...

October 14, 2025—KB5066874 (Monthly Rollup)

None None...

October 14, 2025—KB5066873 (Monthly Rollup)

None None...

October 14, 2025—KB5066872 (Monthly Rollup)

None None...

PT-2025-41983

Name of the Vulnerable Software and Affected Versions AOS firmware affected versions not specified Description A flaw exists in an AOS firmware binary that could allow a malicious, authenticated actor to permanently delete critical boot information. Exploitation of this issue can cause the system...

PT-2025-41991

Name of the Vulnerable Software and Affected Versions Aruba Access Points affected versions not specified Description A security flaw allows an attacker to bypass the hardware root of trust verification, enabling the execution of modified or custom firmware on affected devices. This bypass impact...

CVE-2025-37147: Authentication Bypass by Spoofing

A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware o...

VulnCheck KEV: CVE-2025-47827

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...

KB5066837: Windows 10 LTS 1507 Security Update (October 2025)

The remote Windows host is missing security update 5066837. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066875: Windows Server 2012 Security Update (October 2025)

The remote Windows host is missing security update 5066875. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066782: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2025)

The remote Windows host is missing security update 5066782. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066793: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (October 2025)

The remote Windows host is missing security update 5066793. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

KB5066836: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2025)

The remote Windows host is missing security update 5066836. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...

PT-2025-41852

Name of the Vulnerable Software and Affected Versions Clevo UEFI firmware update packages, including B10717.exe Description The UEFI firmware update packages inadvertently included private signing keys used for Boot Guard and Boot Policy Manifest verification. Exposure of these keys could allow...

CVE-2025-11577: Undefined Security Weakness

Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification. The exposure of these keys could allow attackers to sign malicious firmware that appears trusted by affected systems, undermining th...