Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities

Microsoft's November 2025 security update addresses 63 vulnerabilities across its product portfolio, including five critical issues and several important ones; notable entries include high-severity remote code execution flaws (GDI+, Office, Visual Studio) and privilege-escalation bugs in DirectX and Windows components. Talos notes that CVE-2025-62215 (a Windows kernel elevation-of-privilege vulnerability, CVSS 7.8) has been observed exploited in the wild, and Cisco/Talos have published Snort rules to detect exploitation attempts for a subset of these issues.