Fortra Patch Priority Index for October 2025

Fortra's October 2025 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Google.

Up first on the list are patches for Chromium, Internet Explorer, and Microsoft Edge (Chromium-based) that resolve 15 issues, including use-after-free, heap buffer overflow, inappropriate implementation, and remote code execution vulnerabilities.

Next on the list are patches for Microsoft Office, Word, Excel, PowerPoint, and Visio. These patches resolve 16 issues, including remote code execution and denial-of-service vulnerabilities.

Up next are patches that affect components of the core Windows operating system. These patches resolve over 115 vulnerabilities, including elevation of privilege, spoofing, denial of service, information disclosure, and remote code execution vulnerabilities. These vulnerabilities affect Kernel, SMB, RRAS, Bluetooth Service, NFTS, BitLocker, RPC, Cloud Files Mini Filter Driver, NTLM, DWM Core, and various others.

Next are patches for PowerShell, .NET, .NET Framework, and Visual Studio. These patches resolve information disclosure, security feature bypass, and elevation of privilege vulnerabilities.

Lastly, administrators should focus on server-side patches for SharePoint, Hyper-V, Failover Cluster, WSUS, Exchange Server, SMB, Active Directory Federation services, and Remote Desktop. These patches resolve 15 issues including remote code execution, elevation of privilege, spoofing, and information disclosure vulnerabilities.