cve.bz

Microsoft Patch Tuesday, December 2025: the CVEs

Filter

Microsoft Patch Tuesday December 2025: the CVEs Microsoft published on 9 December 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025, Jun 2025, May 2025, Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2025-64680EPSS 0.4%

    Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2025-64679EPSS 0.5%

    Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  3. 8.8CVE-2025-64678EPSS 1.1%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  4. 7.8CVE-2025-64673EPSS 0.4%

    Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally.

  5. 9.0CVE-2025-64672EPSS 1.1%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  6. 7.8CVE-2025-64671EPSS 0.4%

    Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.

  7. 6.5CVE-2025-64670EPSS 1.1%

    Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network.

  8. 5.3CVE-2025-64667EPSS 0.8%

    User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  9. 7.5CVE-2025-64666EPSS 1.1%

    Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  10. 7.8CVE-2025-64661EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

  11. 7.5CVE-2025-64658EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

  12. 7.0CVE-2025-62573EPSS 0.3%

    Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2025-62572EPSS 0.4%

    Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2025-62571EPSS 0.4%

    Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

  15. 5.5CVE-2025-62570EPSS 0.4%

    Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally.

  16. 7.0CVE-2025-62569EPSS 0.4%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  17. 5.3CVE-2025-62567EPSS 1.1%

    Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.

  18. 7.3CVE-2025-62565EPSS 0.6%

    Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2025-62564EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. 7.8CVE-2025-62563EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  21. 7.8CVE-2025-62562EPSS 0.8%

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

  22. 7.8CVE-2025-62561EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  23. 7.8CVE-2025-62560EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  24. 7.8CVE-2025-62559EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  25. 7.8CVE-2025-62558EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  26. 7.8CVE-2025-62557EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  27. 7.8CVE-2025-62556EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  28. 7.0CVE-2025-62555EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2025-62554EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2025-62553EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  31. 7.8CVE-2025-62552EPSS 0.6%

    Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  32. 8.8CVE-2025-62550EPSS 0.8%

    Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.

  33. 8.8CVE-2025-62549EPSS 1.4%

    Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  34. 7.8CVE-2025-62474EPSS 0.4%

    Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  35. 6.5CVE-2025-62473EPSS 1.2%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  36. 7.8CVE-2025-62472EPSS 2.4%

    Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2025-62470EPSS 0.5%

    Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  38. 7.0CVE-2025-62469EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  39. 5.5CVE-2025-62468EPSS 0.5%

    Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

  40. 7.8CVE-2025-62467EPSS 0.4%

    Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2025-62466EPSS 0.4%

    Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

  42. 6.5CVE-2025-62465EPSS 0.5%

    Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.

  43. 7.8CVE-2025-62464EPSS 0.4%

    Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  44. 6.5CVE-2025-62463EPSS 0.5%

    Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.

  45. 7.8CVE-2025-62462EPSS 0.4%

    Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2025-62461EPSS 0.4%

    Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

  47. 7.8CVE-2025-62458EPSS 0.7%

    Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2025-62457EPSS 0.4%

    Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  49. 8.8CVE-2025-62456EPSS 1.2%

    Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.

  50. 7.8CVE-2025-62455EPSS 0.5%

    Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

  51. 7.8CVE-2025-62454EPSS 2.5%

    Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  52. 7.8CVE-2025-62221KEVEPSS 2.5%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  53. 7.8CVE-2025-59517EPSS 2.6%

    Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

  54. 7.8CVE-2025-59516EPSS 2.5%

    Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

  55. 7.8CVE-2025-55233EPSS 0.4%

    Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  56. 7.8CVE-2025-54100EPSS 1.7%

    Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.