Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day
ID: 45f9a7bb-9bde-5bdc-946c-c0b75dfd76c8
STIX ID: report--45f9a7bb-9bde-5bdc-946c-c0b75dfd76c8
Feed Name: CyberScoop
Threat Score
Microsoft’s December security update patches 57 vulnerabilities, including an actively exploited zero-day (CVE-2025-62221, CVSS 7.8) in the Windows Cloud Files Mini Filter Driver that can lead to privilege escalation; CISA has added this zero-day to its Known Exploited Vulnerabilities catalog. The release also remediates multiple high-severity issues across Windows components, Azure Monitor Agent and SharePoint, and brings Microsoft’s 2025 total to 1,139 CVEs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.