---
title: Patch Tuesday - October 2025
description: October 2025 Patch Tuesday highlights critical vulnerabilities in Microsoft Office, Azure Container Instances, and Windows Server Update Service requiring immediate attention.
---

[Cybersecurity Blog | RedLegg ](https://www.redlegg.com/blog)

# [Patch Tuesday - October 2025](https://www.redlegg.com/blog/patch-tuesday-october-2025)

 Written by [RedLegg Blog](https://www.redlegg.com/blog/author/redlegg-blog) | 10/14/25 9:13 PM

**Important note: These are not the only vulnerabilities that were recently released; however, these are the vulnerabilities RedLegg has identified as critical and require immediate attention.*

# CRITICAL VULNERABILITIES

 

| **Microsoft Office** | [CVE-2025-59234](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59234) | **Critical** | Microsoft Office Remote Code Execution Vulnerability |
| --- | --- | --- | --- |
| **Microsoft Office Excel** | [CVE-2025-59236](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59236) | **Critical** | Microsoft Excel Remote Code Execution Vulnerability |
| **Microsoft Graphics Component** | [CVE-2025-49708](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49708) | **Critical** | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| **Confidential Azure Container Instances** | [CVE-2025-59291](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59291) | **Critical** | Confidential Azure Container Instances Elevation of Privilege Vulnerability |
| **Confidential Azure Container Instances** | [CVE-2025-59292](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59292) | **Critical** | Azure Compute Gallery Elevation of Privilege Vulnerability |
| **Microsoft Office** | [CVE-2025-59227](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59227) | **Critical** | Microsoft Office Remote Code Execution Vulnerability |
| **Windows Server Update Service** | [CVE-2025-59287](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287) | **Critical** | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability |

 

[View full post](https://www.redlegg.com/blog/patch-tuesday-october-2025)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "RedLegg Blog"
  },
  "dateModified" : "2025-10-14T21:13:14.592Z",
  "datePublished" : "2025-10-14T21:13:14Z",
  "headline" : "Patch Tuesday - October 2025",
  "image" : {
    "@type" : "ImageObject",
    "height" : 630,
    "url" : "https://www.redlegg.com/hubfs/Blog%20Featured%20Image%20-Critical%20Bulletin%20v2.png",
    "width" : 1200
  },
  "mainEntityOfPage" : "https://www.redlegg.com/blog/patch-tuesday-october-2025",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/4675768/logo-red-01.png",
      "width" : 419.66666
    },
    "name" : "RedLegg Cybersecurity Blog"
  }
}
```