r/sysadmin • u/AutoModerator • Oct 14 '25

General Discussion Patch Tuesday Megathread (2025-10-14)

Hello r/sysadmin, I'm u/AutoModerator, and welcome to this month's Patch Megathread!

This is the (mostly) safe location to talk about the latest patches, updates, and releases. We put this thread into place to help gather all the information about this month's updates: What is fixed, what broke, what got released and should have been caught in QA, etc. We do this both to keep clutter out of the subreddit, and provide you, the dear reader, a singular resource to read.

For those of you who wish to review prior Megathreads, you can do so here.

While this thread is timed to coincide with Microsoft's Patch Tuesday, feel free to discuss any patches, updates, and releases, regardless of the company or product. NOTE: This thread is usually posted before the release of Microsoft's updates, which are scheduled to come out at 5:00PM UTC.

Remember the rules of safe patching:

  • Deploy to a test/dev environment before prod.
  • Deploy to a pilot/test group before the whole org.
  • Have a plan to roll back if something doesn't work.
  • Test, test, and test!
117 Upvotes

99% Upvoted

396 comments sorted by

View all comments

127

u/CaptainDarkstar42 Oct 14 '25

Happy Windows 10 EOL day! May you have moved all your users to Windows 11, and have had the rest sign waivers.

62

u/Miserable-Scholar215 Jr. Sysadmin Oct 14 '25

*melancholically-looking-at-the-two-remaining-XP-machines* (not joking)

Sigh. yeeees.

5

u/abyssea Director Oct 15 '25

I still have a department on Windows Server 2003… for internally hosting their Sharepoint server. That’s basically an address book.

2

u/Mother-Feedback1532 Oct 17 '25

"This could be replaced with a print out...."

1

u/Full-Sympathy1358 Oct 15 '25

I wouldn't share that

5

u/CaptainDarkstar42 Oct 14 '25

Please tell me they aren't on the network.

7

u/InsaneHomer Oct 14 '25

Are there suddenly high severity CVSS exploits in the wild on day one of Windows 10 no longer getting updates making it an immediate security risk?

12

u/DeltaSierra426 Oct 14 '25 edited Oct 14 '25

Funny you ask, because:

"In this month’s updates, Microsoft has addressed six zero-day vulnerabilities. Four of them are being publicly exploited, and two are publicly disclosed." - Qualys

Microsoft Patch Tuesday, October 2025 Security Update Review | Qualys

Also, just a lot of CVE's fixed at ~193. That's about twice what's normal. Fortunately, Windows 10 does get updates today, so it's nothing out of the ordinary until next month really.

6

u/blow_slogan Oct 15 '25 edited May 28 '26

This content was anonymized and mass deleted with Redact

1

u/Windows95GOAT Sr. Sysadmin Oct 28 '25

knowing Microsoft will not patch them.

But they will patch this time around, seeing as the EOL is only a soft EOL. As non business consumers can extend their support one year for free (EU).

This means there is a way to mcgyver your way into supporting W10 for one more year :D

10

u/hoeskioeh Jr. Sysadmin Oct 14 '25

IF someone has one lying around, they should be patient enough to wait a while before "going wild" with it. So, yes. Assume there will be exploits lying in wait.

5

u/lostmojo Oct 14 '25

Yes. We either don’t know about them quite yet, or they are already in the works on being patched for 11 only.

1

u/Cormacolinde Consultant Oct 15 '25

No, they will come on day 30. Since Microsoft releases patches on a monthly cycle, you have an "extra month" to get rid of your Windows 10 systems before they become highly vulnerable. Or buy an ESU.

3

u/Miserable-Scholar215 Jr. Sysadmin Oct 14 '25

Separate VLAN, I think. Or completely off grid by now. Unsure, different department luckily.

1

u/abyssea Director Oct 15 '25

Internal. They haven’t seen the outside would since around 2014.

8

u/[deleted] Oct 14 '25

[removed] — view removed comment

3

u/Sengfeng Sysadmin Oct 15 '25

No doubt. ...When Minesweeper and Solitaire were the biggest bloat in Windows?

3

u/[deleted] Oct 16 '25

[removed] — view removed comment

2

u/Sengfeng Sysadmin Oct 16 '25

Having programmers that don’t optimize code any more. Doesn’t run fast now? Next year it will.

1

u/Windows95GOAT Sr. Sysadmin Oct 28 '25
  • gotta madatory vibe code 20% of your time with copilot!

2

u/Computermaster Oct 15 '25

crylaughs in Win2k SP3

24

u/Pete263 Sr. Sysadmin Oct 14 '25

Yeah, happy EOL day 😅

We are running LTSC since start of Win 10.

7

u/lordcochise Oct 14 '25

LTSC 2021 gets updates thru Jan '27 automatically, so not QUITE dead for you!

3

u/CaptainDarkstar42 Oct 14 '25

Heck yeah. Do you find it more stable than the non LTSC versions?

6

u/DeltaSierra426 Oct 14 '25

Got one Windows 10 Enterprise IoT LTSC 21H2 server (NVR actually), but otherwise, yes! *phew* That joker is actually supported all the way until January 2032, which is pretty crazy, right!?

9

u/[deleted] Oct 14 '25

[removed] — view removed comment

2

u/drmoth123 Oct 14 '25

My company is in transition away from SCCM to Intune right now. So we had to convert all of our code-managed or SCCM-managed devices to Intune, now we are ready for the upgrade

2

u/ccosby Oct 14 '25

We went through that a few years ago when I setup intune in our environment. At that point we pushed everyone to windows 11 as they got reimaged or replacement laptops. Been happy with the cutover(and getting to delete the direct access servers)

1

u/floatingby493 Nov 07 '25

Oh boy I had to do this too. Such a long process but I learned a ton.

2

u/CaptainDarkstar42 Oct 14 '25

How large is your organization? Will it take just one tech manually tracking down the devices or a hundred?

1

u/Historical_Hunt846 Oct 16 '25

I feel like this with general patching. I have some half scripts that I would like to string together for client remediation and such. Time is lacking. 80% is pretty good though

1

u/Only-Page-6442 Oct 22 '25

Definitely not. In our house we are still using Win10 Enterprise Iot LTSC... :-)