Extended Security Updates
The latest Extended Security Updates coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-55236: Windows Graphics Kernel Race Condition Allows Attackers to Escalate to SYSTEM — Patch Now
Microsoft has published advisory CVE-2025-55236, a time-of-check/time-of-use (TOCTOU) race condition in the Windows Graphics Kernel that hands local, authenticated attackers a path to elevate...
Patch Now: Windows RRAS Flaw CVE-2025-55225 Spills System Memory to Remote Attackers
Microsoft has confirmed a serious information disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS) that could let attackers remotely read sensitive memory contents from...
Windows NTLM Vulnerability Lets Attackers Escalate Privileges Over the Network — Patch Immediately
Microsoft is urging Windows administrators to patch a critical improper authentication vulnerability in NT LAN Manager (NTLM) that allows an authenticated attacker to elevate privileges over a...
Microsoft Warns of Actively Targeted Excel Use-After-Free Flaw CVE-2025-54896
Microsoft has issued a critical security advisory for CVE-2025-54896, a use-after-free vulnerability in Microsoft Office Excel that could allow attackers to execute arbitrary code on Windows...
Microsoft Urges Immediate Patching for Windows Kernel Privilege-Escalation Flaw CVE-2025-54110
Microsoft has released a security update to patch a high-severity vulnerability in the Windows kernel, tracked as CVE-2025-54110, that allows a local attacker to escalate privileges to SYSTEM level....
Windows CDPSvc Elevation Flaw (CVE-2025-54102) Patched; Attackers Could Seize SYSTEM Control
A high-severity vulnerability in the Windows Connected Devices Platform Service (CDPSvc), cataloged as CVE-2025-54102, can be exploited by a low-privileged local attacker to gain NT AUTHORITY\SYSTEM...
Critical Windows RRAS Flaw CVE-2025-54097 Exposes VPN Server Memory: Patch Immediately
Microsoft has issued a security update addressing CVE-2025-54097, a critical information disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS) that allows remote attackers...
Purdue Northwest Mandates Windows 11 Upgrades by August to Beat Microsoft's October 2025 Cutoff
Purdue University Northwest has drawn a line in the sand: all Windows 10 workstations must be upgraded to Windows 11 or replaced by August 2025 — a full two months before Microsoft officially ends...
Windows 11's Surprise August Slump: Why Windows 10 Is Gaining Users Before Its Demise
Windows 11’s market share took an unexpected turn in August, falling back below the 50% mark just as Microsoft’s aging Windows 10 gears up for its final days of free support. New data from web...
As Windows 10 Deadline Nears, Users Face Three Paths: Windows 11 Upgrade, $30 ESU, or Free OS Switch
October 14, 2025 is the date when Microsoft stops routine security updates for Windows 10. Owners of roughly 240 million PCs that still run the decade-old OS will soon have to decide: upgrade to...
Microsoft's Windows 10 Deadline: Can a $400 Acer Aspire Go 15 Save You from Forced Upgrades?
October 14, 2025 isn’t just another Patch Tuesday. It’s the day Microsoft pulls the plug on Windows 10 security updates, forcing millions of PC owners to make a decision that’s equal parts...
Windows 10 Support Ends October 2025: Your Complete Survival Guide
On October 14, 2025, Microsoft will permanently stop shipping security patches for Windows 10. For the hundreds of millions of PCs still running the operating system—many of which cannot upgrade to...