---
title: Patch Tuesday - September 2025
description: Critical vulnerabilities identified by RedLegg in the September 2025 Patch Tuesday update, include issues affecting Microsoft Office, Graphics Kernel, and more.
---

[Cybersecurity Blog | RedLegg ](https://www.redlegg.com/blog)

# [Patch Tuesday - September 2025](https://www.redlegg.com/blog/patch-tuesday-september-2025)

 Written by [RedLegg Blog](https://www.redlegg.com/blog/author/redlegg-blog) | 9/9/25 10:29 PM

**Important note: These are not the only vulnerabilities that were recently released; however, these are the vulnerabilities RedLegg has identified as critical and require immediate attention.*

# CRITICAL VULNERABILITIES

 

| Windows NTLM | [CVE-2025-54918](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-54918?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv) | Windows NTLM Elevation of Privilege Vulnerability | **Critical** |
| --- | --- | --- | --- |
| Graphics Kernel | [CVE-2025-55226](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-55226?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv) | Graphics Kernel Remote Code Execution Vulnerability | **Critical** |
| Windows Win32K - GRFX | [CVE-2025-55228](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-55228?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv) | Windows Graphics Component Remote Code Execution Vulnerability | **Critical** |
| Graphics Kernel | [CVE-2025-55236](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-55236?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv) | Graphics Kernel Remote Code Execution Vulnerability | **Critical** |
| Windows Imaging Component | [CVE-2025-53799](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-53799?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv) | Windows Imaging Component Information Disclosure Vulnerability | **Critical** |
| Microsoft Graphics Component | [CVE-2025-53800](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-53800?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv) | Windows Graphics Component Elevation of Privilege Vulnerability | **Critical** |
| Microsoft Office | [CVE-2025-54910](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-54910?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv)  | Microsoft Office Remote Code Execution Vulnerability | **Critical** |
| Windows Win32K - GRFX | [CVE-2025-55224](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-55224?utm_campaign=Threat%20Intel&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_x8CLJm06remEETZLRPyE7GLLkKNT2AIPlF3KKXZog0vEh-qkGXLKLg3gHGlje2yP8RdHv) | Windows Hyper-V Remote Code Execution Vulnerability | **Critical** |

 

[View full post](https://www.redlegg.com/blog/patch-tuesday-september-2025)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "RedLegg Blog"
  },
  "dateModified" : "2025-09-09T22:29:52.679Z",
  "datePublished" : "2025-09-09T22:29:52Z",
  "headline" : "Patch Tuesday - September 2025",
  "image" : {
    "@type" : "ImageObject",
    "height" : 630,
    "url" : "https://www.redlegg.com/hubfs/Blog%20Featured%20Image%20-Critical%20Bulletin%20v2.png",
    "width" : 1200
  },
  "mainEntityOfPage" : "https://www.redlegg.com/blog/patch-tuesday-september-2025",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/4675768/logo-red-01.png",
      "width" : 419.66666
    },
    "name" : "RedLegg Cybersecurity Blog"
  }
}
```