The Microsoft September 2025 security updates have been released and consist of 80 new CVEs to Microsoft products. With the additional 5 non-Microsoft CVEs being documented, it brings the combined total to 85 CVEs.
Of the Microsoft CVEs released, 8 are rated Critical and the rest are rated Important in severity. At the time of release, one is listed as being publicly known and none are listed as under active attack.
The security updates apply to the following products, features and roles: Windows and Windows Components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, Hyper-V, SQL Server, Defender Firewall Service, and Xbox.
Information regarding known issues with KBs included in the security updates can be found at the bottom of the page at September 2025 Security Updates - Release Notes - Security Update Guide - Microsoft (https://msrc.microsoft.com/update-guide/releaseNote/2025-Sep).
Recommended Reading: See Dustin Childs review and analysis in Zero Day Initiative -- The September 2025 Security Update Review (https://www.zerodayinitiative.com/blog/2025/9/9/the-september-2025-security-update-review).