Windows Kernel CVE-2025-62215: Exploited Race to SYSTEM
Patched in November 2025; the hosts still at risk are those behind on updates and Windows 10 devices outside Extended Security Updates, which never received this fix and should be enrolled or upgraded.
Must act: Owners of Windows 10 22H2 devices not enrolled in Extended Security Updates, and of any Windows 11 or Server 2019, 2022 or 2025 host below the November 2025 builds.
Can relax: Fleets on current cumulative updates; Microsoft does not list Windows Server 2016 or older releases as affected.
- Compare every host's build and UBR with the November 2025 fixed builds and install the latest cumulative update on anything older.
- Enroll remaining Windows 10 22H2 devices in Extended Security Updates or upgrade them to Windows 11; unenrolled devices will never get this fix.
- Prioritize hosts where many low-privilege users run code, such as Remote Desktop servers, VDI pools and shared jump hosts.