Inquire about the Windows 10 (Version 1809 LTSC) patch distribution schedule?

Question

Hello.

The vulnerability below was found in Windows10 (Version 1809 LTSC).

However, I cannot see the patch information that has been deployed.

Can you tell me the expected deployment date for the patch?

[Vulnerability]

1)Microsoft Windows Remote Access Connection Manager (RasMan) Service Linked List Handling NULL Pointer Dereference Local DoS,

2)Multiple Vendor Processors Speculative Conditional Branch Execution Caching Out-of-bounds Access Arbitrary Kernel Memory Disclosure (Spectre) (CVE-2025-63094)

Answer 1

Hi song joohyung

For the RasMan service linked-list NULL-pointer dereference DoS, at this time there is no official patch from Microsoft. ACROS Security has released a free interim micropatch via 0patch, and they’ve confirmed Microsoft plans to include an official fix for supported Windows versions in an upcoming security update.

Regarding the Spectre‐type speculative execution side‑channel weakness (CVE‑2025‑63094), there is no patch or advisory currently published. The NVD listing confirms the issue exists, but no mitigation or KB article is yet available, and Microsoft has not included it in any recent LTSC cumulative updates.

Windows 10 1809 LTSC remains supported until January 2029, but you won’t see new fixes until Microsoft adds them to the next relevant security rollup. I recommend enabling the 0patch micropatch for the RasMan issue in the interim, then monitor Microsoft’s Patch Tuesday releases. If you’re missing future updates, I can help verify KB versions or registry entries once the patch is released.

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!

Harry.