Patch Gap

Windows · updated Oct 27, 2026

Windows: bugs fixed in the November 2025 update were used in real attacks

Patched: update nowBeing attacked nowHigh

Last checked · Check before installing; only use the official link.

Two bugs in Windows let a program that is already on your PC give itself full control of the computer. Both were fixed in the November 2025 update. Microsoft fixed it in the November 2025 Windows update. Any newer monthly update also includes the fix.

Status
Patched: update now
Being attacked?
Yes[3]
Severity
High
Updated

CISA lists both as used in real attacks (CVE-2025-62215 added Nov 12, 2025; CVE-2025-60710 added Apr 13, 2026). Microsoft's Security Update Guide marks them as exploited. Severity: Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked). First reported .

Am I affected?

You are at risk only if your Windows PC has not installed any monthly update since November 2025. Open Settings > Windows Update. If it says 'You're up to date', you are covered.

AppDeviceAffectedFixed in
Windows 10 and 11WindowsWindows 10 and 11 PCs without the November 2025 security update or a newer oneFixed by the November 2025 Windows security update (2025-11-11) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.[1][2]

How to check your version

These checks only look. They do not change anything on your computer.

Windows 10 and 11 on Windows

Easy way: Start > Settings > Windows Update. Then click Update history to see recent updates.

Or type this in PowerShellRead-only. It only reads the version and changes nothing.

Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn

How to fix it

  1. Open Start > Settings > Windows Update.
  2. Click Check for updates.
  3. Let the updates download and install.
  4. Restart your computer when it asks.

More on each app: Is my Windows up to date?

Official links

Check before installing, and only use these official links or the app's own update button.

For AI agents

This page as data: /incidents/windows-attacked-bugs-nov-2025.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.

Tracking numbers (CVE): CVE-2025-62215, CVE-2025-60710

Sources

  1. MakerMicrosoft Security Update Guide: CVE-2025-62215 (November 2025 update) (Nov 11, 2025)
  2. MakerMicrosoft Security Update Guide: CVE-2025-60710 (November 2025 update) (Nov 11, 2025)
  3. CISACISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-62215 (added 2025-11-12) (Nov 12, 2025)
  4. CISACISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-60710 (added 2026-04-13) (Apr 13, 2026)
  5. NVDNVD: CVE-2025-62215 (Nov 11, 2025)

"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.