---
title: "Security digest: October 14, 2025"
url: https://erroneo.us/security/2025-10-14/
description: "October 14, 2025 vulnerability digest: 4 CISA KEV additions (IGEL, Microsoft, SKYSEA); 1 critical advisory (NuGet). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-10-14
date_modified: 2025-10-14
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: October 14, 2025

4 known exploited (cisa kev) additions and 1 critical advisory.

## Take stock

- Do you run any of these? Microsoft Windows, IGEL IGEL OS, SKYSEA Client View. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-11-04.
- NuGet: 1 critical advisory ( Microsoft.AspNetCore.App.Runtime.linux-arm , Microsoft.AspNetCore.App.Runtime.linux-arm64 , Microsoft.AspNetCore.App.Runtime.linux-musl-arm , Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 , Microsoft.AspNetCore.App.Runtime.linux-musl-x64 , Microsoft.AspNetCore.App.Runtime.linux-x64 , Microsoft.AspNetCore.App.Runtime.osx-arm64 , Microsoft.AspNetCore.App.Runtime.osx-x64 …). Check with dotnet list package --vulnerable --include-transitive .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2025-59230](https://erroneo.us/security/cve/CVE-2025-59230/index.md) Microsoft Windows: Microsoft Windows Improper Access Control Vulnerability (CISA due 2025-11-04)
- [CVE-2025-47827](https://erroneo.us/security/cve/CVE-2025-47827/index.md) IGEL IGEL OS: IGEL OS Use of a Key Past its Expiration Date Vulnerability (CISA due 2025-11-04)
- [CVE-2025-24990](https://erroneo.us/security/cve/CVE-2025-24990/index.md) Microsoft Windows: Microsoft Windows Untrusted Pointer Dereference Vulnerability (CISA due 2025-11-04)
- [CVE-2016-7836](https://erroneo.us/security/cve/CVE-2016-7836/index.md) SKYSEA Client View: SKYSEA Client View Improper Authentication Vulnerability (CISA due 2025-11-04)

## Critical advisories

- [CVE-2025-55315](https://erroneo.us/security/cve/CVE-2025-55315/index.md) Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability — NuGet Microsoft.AspNetCore.App.Runtime.linux-arm = 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107; NuGet Microsoft.AspNetCore.App.Runtime.linux-arm64 = 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107; NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm = 10.0.0-rc.1.25451.107 → 10.0.0-rc.2.25502.107

---
Source page: https://erroneo.us/security/2025-10-14/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt