{"id":9064,"date":"2025-12-10T04:04:06","date_gmt":"2025-12-10T04:04:06","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/12\/10\/32550\/"},"modified":"2025-12-10T04:04:06","modified_gmt":"2025-12-10T04:04:06","slug":"32550","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/12\/10\/32550\/","title":{"rendered":"Microsoft Patch Tuesday December 2025, (Tue, Dec 9th)"},"content":{"rendered":"

Microsoft Patch Tuesday December 2025, (Tue, Dec 9th)
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

This release addresses 57 vulnerabilities. 3 of these vulnerabilities are rated critical. One vulnerability was already exploited, and two were publicly disclosed before the patch was released.<\/p>\n

CVE-2025-62221: This privilege escalation vulnerability in the Microsoft Cloud Files Mini Filters driver is already being exploited.<\/p>\n

CVE-2025-54100: A PowerShell script using\u00a0Invoke-WebRequest may execute scripts that are included in the response. This is what Invoke-WebRequest is supposed to do. The patch adds a warning suggesting adding the\u00a0-UseBasicParsing parameter to avoid executing scripts.<\/p>\n

CVE-2025-64671: The GitHub Copilot plugin for JetBrains may lead to remote code execution. This is overall an issue with many AI code assistance as they have far-reaching access to the IDE.<\/p>\n

The critical vulnerabilities are remote code execution vulnerabilities in Office and Outlook.<\/p>\n

\u00a0<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Description<\/th>\n<\/tr>\n
CVE<\/th>\nDisclosed<\/th>\nExploited<\/th>\nExploitability (old versions)<\/th>\ncurrent version<\/th>\nSeverity<\/th>\nCVSS Base (AVG)<\/th>\nCVSS Temporal (AVG)<\/th>\n<\/tr>\n<\/thead>\n
Application Information Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62572%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Azure Monitor Agent Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62550%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
DirectX Graphics Kernel Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62463%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
%%cve:2025-62465%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
DirectX Graphics Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62573%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
GitHub Copilot for Jetbrains Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64671%%<\/td>\nYes<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Access Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62552%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62469%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2025-62569%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62223%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nLow<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Microsoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62561%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62563%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62564%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62553%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62556%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62560%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Exchange Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64666%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Microsoft Exchange Server Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64667%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.3<\/td>\n4.6<\/td>\n<\/tr>\n
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62455%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Office Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62554%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2025-62557%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Outlook Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62562%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft SharePoint Server Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64672%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Word Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62555%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2025-62558%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62559%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
PowerShell Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-54100%%<\/td>\nYes<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62458%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Camera Frame Server Monitor Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62570%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
Windows Client-Side Caching Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62466%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62454%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62457%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62221%%<\/td>\nNo<\/td>\nYes<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Common Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62470%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64679%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-64680%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Defender Firewall Service Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62468%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.4<\/td>\n3.9<\/td>\n<\/tr>\n
Windows DirectX Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64670%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows File Explorer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64658%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2025-62565%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.3<\/td>\n6.4<\/td>\n<\/tr>\n
Windows Hyper-V Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62567%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.3<\/td>\n4.6<\/td>\n<\/tr>\n
Windows Installer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62571%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62461%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62462%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62464%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-55233%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62467%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62472%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-62474%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62456%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62473%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-62549%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2025-64678%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Shell Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64661%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2025-64673%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-59516%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2025-59517%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

—
\nJohannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu<\/a>
\nTwitter<\/a>|<\/p>\n

(c) SANS Internet Storm Center. https:\/\/isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.<\/p><\/div>\n

\t

\n
<\/BR><\/p>\n

\t

\n
<\/BR>
\nGo to isc.sans.edu<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft Patch Tuesday December 2025, (Tue, Dec 9th) This release addresses 57 vulnerabilities. 3 of these vulnerabilities are rated critical. One vulnerability was already exploited, and two were publicly disclosed before the patch was released. CVE-2025-62221: This privilege escalation vulnerability in the Microsoft Cloud Files Mini Filters driver is already being exploited. CVE-2025-54100: A PowerShell […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[69],"class_list":["post-9064","post","type-post","status-publish","format-standard","hentry","category-isc-sans-edu","tag-isc-sans-edu"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9064"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=9064"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9064\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=9064"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=9064"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=9064"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}