Microsoft Fixes Exploited Zero Day in Light Patch Tuesday

Microsoft's December 2025 security update addresses 57 vulnerabilities, including an actively exploited Windows Cloud Files Mini Filter Driver zero-day (CVE-2025-62221) that can lead to SYSTEM-level privilege escalation, plus two flaws (PowerShell RCE CVE-2025-54100 and GitHub Copilot RCE CVE-2025-64671) with public proof-of-concept exploits; several other high-severity elevation-of-privilege and RCE issues were patched and organizations are urged to prioritize these fixes.