patch tuesday october 2025

Microsoft’s October Patch Tuesday landed as a watershed software-security event: the company shipped fixes for an extraordinarily large set of vulnerabilities — widely reported as between 167 and 175 CVEs in a single cycle — including multiple actively exploited zero‑day elevation‑of‑privilege...

A use-after-free flaw in the Windows Bluetooth Service has been cataloged as CVE-2025-58728 and classified as a local elevation-of-privilege vulnerability that Microsoft patched as part of the October 2025 update cycle; the weakness can allow an authenticated, local user process to corrupt...