Microsoft on Tuesday launched 56 patches affecting 10 product households. Two of the addressed points are thought-about by Microsoft to be of Essential severity \u2013 and, unusually, each belong to the blended Workplace-365 product household. Eight have a CVSS base rating of 8.0 or greater. One is understood to be beneath energetic exploit within the wild, and two others are publicly disclosed.<\/p>\n
That\u2019s the excellent news. We\u2019ll get to the advisories in a second.<\/p>\n
At patch time, six CVEs are judged extra prone to be exploited within the subsequent 30 days by the corporate\u2019s estimation, along with the one already detected to be so. Varied of this month\u2019s points are amenable to direct detection by Sophos protections, and we embody data on these in a desk beneath.<\/p>\n
The discharge additionally contains data on 14 Edge patches launched final week, in addition to 12 ColdFusion and 4 Adobe Reader patches launched in the present day. (The only real Edge patch originating with Microsoft is counted on this complete relatively within the basic Patch Tuesday rely of 56; the remainder originated with Chromium itself and had been patched earlier within the month.) We’ve included data on all these patches in Appendix D. There is no such thing as a replace to the Servicing Stack listed in Microsoft\u2019s manifest this month.<\/p>\n
Microsoft additionally launched data on 84 CVEs affecting CBL Mariner and\/or Azure Linux. All 84 CVEs originated with MITRE and have been addressed over the course of the previous week, and all 84 are indicated as exploited in within the wild (although none are marked as publicly disclosed). Little data was made obtainable on these 84 CVEs, however we\u2019ve supplied some steerage in Appendix F on the finish of the publish.<\/p>\n
We’re as at all times together with on the finish of this publish appendices itemizing all Microsoft\u2019s patches sorted by severity (Appendix A), by predicted exploitability timeline and CVSS Base rating (Appendix B), and by product household (Appendix C). Appendix E gives a breakout of the patches affecting the varied Home windows Server platforms.<\/p>\n
By the numbers<\/strong><\/p>\n Determine 1: Elevation of Privilege points had been probably the most quite a few within the December assortment, as soon as once more<\/em><\/p>\n Merchandise<\/strong><\/p>\n As is our customized for this record, CVEs that apply to multiple product household are counted as soon as for every household they have an effect on. We notice, by the way in which, that CVE names don\u2019t at all times mirror affected product households carefully. Particularly, some CVEs names within the Workplace household might point out merchandise that don\u2019t seem within the record of merchandise affected by the CVE, and vice versa.<\/p>\n Determine 2: A smaller, closely end-user-oriented group of product households acquired patches this month. Although Home windows accounts for half of them, patches associated to the working system are all Necessary in severity<\/em><\/p>\n Notable December updates<\/strong><\/p>\n Along with the problems mentioned above, a number of particular objects benefit consideration.<\/p>\n CVE-2025-62554 \u2014 Microsoft Workplace Distant Code Execution Vulnerability All seven of those RCE points have an effect on a number of variations of 365 and Workplace, together with Microsoft Workplace LTSC for Mac 2021 and 2024. Nevertheless, the patches for these Mac variations aren\u2019t prepared but. Customers liable for updating Macs are requested to watch the CVE data for every vulnerability for additional phrase on these patches. Of the seven, pay particular consideration to CVE-2025-62554 and CVE-2025-62257 (the 2 merely known as \u201cWorkplace\u201d vulnerabilities) \u2013 they\u2019re those which Preview Pane is an assault vector. These two CVEs are Essential-severity and have a CVSS Base rating of 8.4. The others are Necessary-severity.<\/p>\n CVE-2025-54100 \u2014 PowerShell Distant Code Execution Vulnerability<\/strong><\/p>\n As with the 84 Mariner vulnerabilities talked about above, the discharge of this patch arrived with much less data than Microsoft-issued CVEs usually do. That mentioned, this Necessary-class difficulty is allotted to Home windows; as with the GitHub difficulty mentioned beneath, it includes improper neutralization of particular parts utilized in a command. For this one, Microsoft notes that after set up, customers making an attempt to deploy the Invoke-WebRequest command will get a brand new affirmation immediate warning them of doubtless undesirable script code execution and recommending that they embody the -UseBasicParsing swap to maintain issues behaving properly.<\/p>\n CVE-2025-64666 \u2014 Microsoft Alternate Server Elevation of Privilege Vulnerability These two Necessary-severity bugs each have an effect on Alternate Server 2016 and 2019, that are out-of-support variations of Alternate \u2013 except you\u2019re paying for Microsoft\u2019s Prolonged Safety Replace (ESU) program, you\u2019re not getting these patches. (Alternate Server Subscription Version subscribers are coated.) The EoP is a reasonably specialised merchandise that might require the attacker to arrange the goal setting forward of time, whereas the Spoofing bug impacts<\/a>, particularly, how From: addresses are exhibited to the consumer.<\/p>\n CVE-2025-64671 \u2014 GitHub Copilot for Jetbrains Distant Code Execution Vulnerability<\/strong><\/p>\n The one publicly disclosed vulnerability to this point this month permits the Jetbrain AI-based coding assistant to wreck the vibe-coding vibe, because of improper neutralization of particular parts utilized in a command. Based on Microsoft, an attacker may execute extra instructions by appending them to instructions allowed within the consumer\u2019s terminal auto-approve setting. This vulnerability is credited to unbiased researcher Ari Marzouk, who simply final weekend posted evaluation of a probably energetic<\/a> new class of vulnerabilities in AI IDEs. An intriguing learn.<\/p>\n Determine 3: The yr wrapped up with Elevation of Privilege and Distant Code Execution swapping spots on the high of the charts. Be aware, although, that although there have been fewer RCE bugs squashed this yr, there was the next share of Essential-severity RCEs. General there have been 92 Essential-severity CVEs handle in 2025 in comparison with 55 final yr.<\/em><\/p>\n Determine 4: Behold the ultimate (one hopes) 2025 tally: In the long run, it was probably the most patch-heavy yr (1196 excluding out-of-band patch releases) since 2020 (1245 patches excluding out-of-bands), with two record-breaking months in January and October.<\/em><\/p>\n \u00a0<\/p>\n Sophos protections<\/strong><\/p>\n \u00a0<\/p>\n As you may each month, for those who don\u2019t need to wait in your system to drag down Microsoft\u2019s updates itself, you may obtain them manually from the Home windows Replace Catalog web site. Run the winver.exe <\/strong>device to find out which construct of Home windows you\u2019re working, then obtain the Cumulative Replace bundle in your particular system\u2019s structure and construct quantity.<\/p>\n Appendix A: Vulnerability Impression and Severity<\/strong><\/p>\n This can be a record of December patches sorted by affect, then sub-sorted by severity. Every record is additional organized by CVE.<\/p>\n Elevation of Privilege (28 CVEs)<\/strong><\/p>\n \u00a0<\/strong><\/p>\n Distant Code Execution (19 CVEs)<\/strong><\/p>\n \u00a0<\/strong><\/p>\n Data Disclosure (4 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n Denial of Service (3 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n Spoofing (2 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n Appendix B: Exploitability and CVSS<\/strong><\/p>\n This can be a record of the December CVEs judged by Microsoft to be extra prone to be exploited within the wild inside the first 30 days post-release. The record is organized by CVE.<\/p>\n \u00a0<\/p>\n The CVE listed beneath was recognized to be beneath energetic exploit previous to the discharge of this month\u2019s patches.<\/p>\n \u00a0<\/p>\n These are the December CVEs with a Microsoft-assessed CVSS Base rating of 8.0 or greater. They’re organized by rating and additional sorted by CVE. For extra data on how CVSS works, please see our collection on patch prioritization schema<\/a>.<\/p>\n \u00a0<\/p>\n Appendix C: Merchandise Affected<\/strong><\/p>\n This can be a record of December\u2019s patches sorted by product household, then sub-sorted by severity. Every record is additional organized by CVE. Patches which might be shared amongst a number of product households are listed a number of occasions, as soon as for every product household. Sure points for which advisories have been issued are coated in Appendix D, and points affecting Home windows Server are additional sorted in Appendix E. All CVE titles are correct as made obtainable by Microsoft; for additional data on why sure merchandise might seem in titles and never product households (or vice versa), please seek the advice of Microsoft.<\/p>\n Home windows (38 CVEs)<\/strong><\/p>\n \u00a0<\/strong><\/p>\n 365 (13 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n Workplace (13 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n Excel (6 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n SharePoint (5 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n Phrase (4 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n Alternate (2 CVEs)<\/strong><\/p>\n \u00a0<\/p>\n Entry (1 CVE)<\/strong><\/p>\n Azure (1 CVE)<\/strong><\/p>\n GitHub (1 CVE)<\/strong><\/p>\n \u00a0<\/p>\n Appendix D: Advisories and Different Merchandise<\/strong><\/p>\n There are 14 Edge-related advisories famous in December\u2019s launch. All however CVE-2025-62223 originated with Chrome. All had been patched throughout the earlier week. Please notice that the Microsoft-issued CVE applies solely to Edge for Mac.<\/p>\n Adobe is releasing patches for 12 ColdFusion points in the present day with Bulletin APSB25-105. All 12 CVEs have an effect on ColdFusion 22, 16, 4 and earlier variations.<\/p>\n\n
\n
\n
![\"A](\"https:\/\/news.sophos.com\/wp-content\/uploads\/2025\/12\/pt2512-fig01.png\")
<\/a><\/p>\n\n
<\/a><\/p>\n
CVE-2025-62555 \u2014 Microsoft Phrase Distant Code Execution Vulnerability
CVE-2025-62557 \u2014 Microsoft Workplace Distant Code Execution Vulnerability
CVE-2025-62558 \u2014 Microsoft Phrase Distant Code Execution Vulnerability
CVE-2025-62559 \u2014 Microsoft Phrase Distant Code Execution Vulnerability
CVE-2025-62560 \u2014 Microsoft Excel Distant Code Execution Vulnerability
CVE-2025-62561 \u2014 Microsoft Excel Distant Code Execution Vulnerability<\/strong><\/p>\n
CVE-2025-64667 \u2014 Microsoft Alternate Server Spoofing Vulnerability<\/strong><\/p>\n<\/a><\/p>\n<\/a><\/p>\n\n\n
\n CVE<\/strong><\/td>\n Sophos Intercept X\/Endpoint IPS<\/strong><\/td>\n Sophos XGS Firewall<\/strong><\/td>\n<\/tr>\n \n CVE-2025-59516<\/td>\n Exp\/2559516-A<\/td>\n Exp\/2559516-A<\/td>\n<\/tr>\n \n CVE-2025-59517<\/td>\n Exp\/2559517-A<\/td>\n Exp\/2559517-A<\/td>\n<\/tr>\n \n CVE-2025-62221<\/td>\n Exp\/2562221-A<\/td>\n Exp\/2562221-A<\/td>\n<\/tr>\n \n CVE-2025-62454<\/td>\n Exp\/2562454-A<\/td>\n Exp\/2562454-A<\/td>\n<\/tr>\n \n CVE-2025-62470<\/td>\n Exp\/2562470-A<\/td>\n Exp\/2562470-A<\/td>\n<\/tr>\n \n CVE-2025-62472<\/td>\n Exp\/2562472-A<\/td>\n Exp\/2562472-A<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-55233<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-59516<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-59517<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62221<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62454<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62455<\/td>\n Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62457<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62458<\/td>\n Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62461<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62462<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62464<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62466<\/td>\n Home windows Consumer-Aspect Caching Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62467<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62469<\/td>\n Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62470<\/td>\n Home windows Frequent Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62472<\/td>\n Home windows Distant Entry Connection Supervisor Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62474<\/td>\n Home windows Distant Entry Connection Supervisor Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62565<\/td>\n Home windows File Explorer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62569<\/td>\n Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62571<\/td>\n Home windows Installer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62572<\/td>\n Utility Data Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62573<\/td>\n DirectX Graphics Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64658<\/td>\n Home windows File Explorer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64661<\/td>\n Home windows Shell Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64666<\/td>\n Microsoft Alternate Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64673<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64679<\/td>\n Home windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64680<\/td>\n Home windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Essential severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62554<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62557<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-54100<\/td>\n PowerShell Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62456<\/td>\n Home windows Resilient File System (ReFS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62549<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62550<\/td>\n Azure Monitor Agent Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62552<\/td>\n Microsoft Entry Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62553<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62555<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62556<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62558<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62559<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62560<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62561<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62562<\/td>\n Microsoft Outlook Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62563<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62564<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64671<\/td>\n GitHub Copilot for Jetbrains Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64678<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62468<\/td>\n Home windows Defender Firewall Service Data Disclosure Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62473<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Data Disclosure Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62570<\/td>\n Home windows Digicam Body Server Monitor Data Disclosure Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64670<\/td>\n Home windows DirectX Data Disclosure Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62463<\/td>\n DirectX Graphics Kernel Denial of Service Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62465<\/td>\n DirectX Graphics Kernel Denial of Service Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62567<\/td>\n Home windows Hyper-V Denial of Service Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-64667<\/td>\n Microsoft Alternate Server Spoofing Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64672<\/td>\n Microsoft SharePoint Server Spoofing Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Exploitation extra seemingly inside the subsequent 30 days<\/strong><\/td>\n<\/tr>\n \n CVE-2025-59516<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-59517<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62454<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62458<\/td>\n Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62470<\/td>\n Home windows Frequent Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62472<\/td>\n Home windows Distant Entry Connection Supervisor Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n CVE-2025-62221<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n CVSS Base<\/strong><\/td>\n CVSS Temporal<\/strong><\/td>\n CVE<\/strong><\/td>\n Title<\/strong><\/td>\n<\/tr>\n \n 8.8<\/td>\n 7.7<\/td>\n CVE-2025-62456<\/td>\n Home windows Resilient File System (ReFS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n 8.8<\/td>\n 7.7<\/td>\n CVE-2025-62549<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n 8.8<\/td>\n 7.7<\/td>\n CVE-2025-62550<\/td>\n Azure Monitor Agent Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n 8.8<\/td>\n 7.7<\/td>\n CVE-2025-64672<\/td>\n Microsoft SharePoint Server Spoofing Vulnerability<\/td>\n<\/tr>\n \n 8.8<\/td>\n 7.7<\/td>\n CVE-2025-64678<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n 8.4<\/td>\n 7.3<\/td>\n CVE-2025-62554<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n 8.4<\/td>\n 7.3<\/td>\n CVE-2025-62557<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n 8.4<\/td>\n 7.3<\/td>\n CVE-2025-64671<\/td>\n GitHub Copilot for Jetbrains Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n \n<\/tr>\n \n CVE-2025-54100<\/td>\n PowerShell Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-55233<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-59516<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-59517<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62221<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62454<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62455<\/td>\n Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62456<\/td>\n Home windows Resilient File System (ReFS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62457<\/td>\n Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62458<\/td>\n Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62461<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62462<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62463<\/td>\n DirectX Graphics Kernel Denial of Service Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62464<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62465<\/td>\n DirectX Graphics Kernel Denial of Service Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62466<\/td>\n Home windows Consumer-Aspect Caching Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62467<\/td>\n Home windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62468<\/td>\n Home windows Defender Firewall Service Data Disclosure Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62469<\/td>\n Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62470<\/td>\n Home windows Frequent Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62472<\/td>\n Home windows Distant Entry Connection Supervisor Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62473<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Data Disclosure Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62474<\/td>\n Home windows Distant Entry Connection Supervisor Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62549<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62565<\/td>\n Home windows File Explorer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62567<\/td>\n Home windows Hyper-V Denial of Service Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62569<\/td>\n Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62570<\/td>\n Home windows Digicam Body Server Monitor Data Disclosure Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62571<\/td>\n Home windows Installer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62572<\/td>\n Utility Data Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62573<\/td>\n DirectX Graphics Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64658<\/td>\n Home windows File Explorer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64661<\/td>\n Home windows Shell Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64670<\/td>\n Home windows DirectX Data Disclosure Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64673<\/td>\n Home windows Storage VSP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64678<\/td>\n Home windows Routing and Distant Entry Service (RRAS) Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64679<\/td>\n Home windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64680<\/td>\n Home windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Essential severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62554<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62557<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62562<\/td>\n Microsoft Outlook Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62552<\/td>\n Microsoft Entry Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62553<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62555<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62556<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62558<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62559<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62560<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62561<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62563<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62564<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Essential severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62554<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62557<\/td>\n Microsoft Workplace Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62552<\/td>\n Microsoft Entry Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62553<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62555<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62556<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62558<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62559<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62560<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62561<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62562<\/td>\n Microsoft Outlook Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62563<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62564<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62553<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62556<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62560<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62561<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62563<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62564<\/td>\n Microsoft Excel Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Essential severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62562<\/td>\n Microsoft Outlook Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62555<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62558<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62559<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64672<\/td>\n Microsoft SharePoint Server Spoofing Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Essential severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62562<\/td>\n Microsoft Outlook Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62555<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62558<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-62559<\/td>\n Microsoft Phrase Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-64666<\/td>\n Microsoft Alternate Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n \n CVE-2025-64667<\/td>\n Microsoft Alternate Server Spoofing Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62552<\/td>\n Microsoft Entry Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-62550<\/td>\n Azure Monitor Agent Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n Necessary severity<\/strong><\/td>\n<\/tr>\n \n CVE-2025-64671<\/td>\n GitHub Copilot for Jetbrains Distant Code Execution Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n CVE-2025-13630<\/td>\n Chromium: CVE-2025-13630 Kind Confusion in V8<\/td>\n<\/tr>\n \n CVE-2025-13631<\/td>\n Chromium: CVE-2025-13631 Inappropriate implementation in Google Updater<\/td>\n<\/tr>\n \n CVE-2025-13632<\/td>\n Chromium: CVE-2025-13632 Inappropriate implementation in DevTools<\/td>\n<\/tr>\n \n CVE-2025-13633<\/td>\n Chromium: CVE-2025-13633 Use after free in Digital Credentials<\/td>\n<\/tr>\n \n CVE-2025-13634<\/td>\n Chromium: CVE-2025-13634 Inappropriate implementation in Downloads<\/td>\n<\/tr>\n \n CVE-2025-13635<\/td>\n Chromium: CVE-2025-13635 Inappropriate implementation in Downloads<\/td>\n<\/tr>\n \n CVE-2025-13636<\/td>\n Chromium: CVE-2025-13636 Inappropriate implementation in Break up View<\/td>\n<\/tr>\n \n CVE-2025-13637<\/td>\n Chromium: CVE-2025-13637 Inappropriate implementation in Downloads<\/td>\n<\/tr>\n \n CVE-2025-13638<\/td>\n Chromium: CVE-2025-13638 Use after free in Media Stream<\/td>\n<\/tr>\n \n CVE-2025-13639<\/td>\n Chromium: CVE-2025-13639 Inappropriate implementation in WebRTC<\/td>\n<\/tr>\n \n CVE-2025-13640<\/td>\n Chromium: CVE-2025-13640 Inappropriate implementation in Passwords<\/td>\n<\/tr>\n \n CVE-2025-13720<\/td>\n Chromium: CVE-2025-13720 Unhealthy forged in Loader<\/td>\n<\/tr>\n \n CVE-2025-13721<\/td>\n Chromium: CVE-2025-13721 Race in v8<\/td>\n<\/tr>\n \n CVE-2025-62223<\/td>\n Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n\n
\n