Microsoft Patch Tuesday — December 2025

Tuesday, 9 December 2025

Vulnerabilities: 57
Critical: 0
High: 50
Zero-days: 1
Public exploit: 4

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2025-62221 Zero-day Public exploit Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 2.5%

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2025-54100 Public exploit PowerShell Remote Code Execution Vulnerability
EPSS 2.2%
High 7.8
CVE-2025-62454 Public exploit Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 2.3%
High 7.8
CVE-2025-62470 Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability

All vulnerabilities 57

High50 Show

High 7.8
CVE-2025-62221 Zero-day Public exploit Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 2.5%
High 8.8
CVE-2025-62456 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-62549 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-62550 Azure Monitor Agent Remote Code Execution Vulnerability
High 8.8
CVE-2025-64672 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1%
High 8.8
CVE-2025-64678 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1%
High 8.4
CVE-2025-62554 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-62557 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-64671 GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
High 7.8
CVE-2025-54100 Public exploit PowerShell Remote Code Execution Vulnerability
EPSS 2.2%
High 7.8
CVE-2025-62454 Public exploit Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 2.3%
High 7.8
CVE-2025-62470 Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-55233 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-59516 Windows Storage VSP Driver Elevation of Privilege Vulnerability
EPSS 2.3%
High 7.8
CVE-2025-59517 Windows Storage VSP Driver Elevation of Privilege Vulnerability
EPSS 2.5%
High 7.8
CVE-2025-62455 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62457 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62458 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62461 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62462 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62464 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62466 Windows Client-Side Caching Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62467 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62472 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
EPSS 2.2%
High 7.8
CVE-2025-62474 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62552 Microsoft Access Remote Code Execution Vulnerability
High 7.8
CVE-2025-62553 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-62556 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-62558 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-62559 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-62560 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-62561 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-62562 Microsoft Outlook Remote Code Execution Vulnerability
High 7.8
CVE-2025-62563 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-62564 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-62571 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2025-62572 Application Information Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-64661 Windows Shell Elevation of Privilege Vulnerability
High 7.8
CVE-2025-64669 Windows Admin Center Elevation of Privilege Vulnerability
High 7.8
CVE-2025-64673 Windows Storage VSP Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-64679 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-64680 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.5
CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability
High 7.5
CVE-2025-64666 Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 1%
High 7.3
CVE-2025-62565 Windows File Explorer Elevation of Privilege Vulnerability
High 7.1
CVE-2025-62570 Windows Camera Frame Server Monitor Information Disclosure Vulnerability
High 7.0
CVE-2025-62469 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.0
CVE-2025-62555 Microsoft Word Remote Code Execution Vulnerability
High 7.0
CVE-2025-62569 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.0
CVE-2025-62573 DirectX Graphics Kernel Elevation of Privilege Vulnerability

Medium7 Show

Medium 6.5
CVE-2025-62463 DirectX Graphics Kernel Denial of Service Vulnerability
Medium 6.5
CVE-2025-62465 DirectX Graphics Kernel Denial of Service Vulnerability
Medium 6.5
CVE-2025-62473 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.1%
Medium 6.5
CVE-2025-64670 Windows DirectX Information Disclosure Vulnerability
EPSS 1%
Medium 5.5
CVE-2025-62468 Windows Defender Firewall Service Information Disclosure Vulnerability
Medium 5.3
CVE-2025-62567 Windows Hyper-V Denial of Service Vulnerability
EPSS 1%
Medium 5.3
CVE-2025-64667 Microsoft Exchange Server Spoofing Vulnerability