What was in the December 2025 Microsoft Patch Tuesday?

Microsoft released 55 updates fixing 223 CVEs in December 2025, of which 6 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › December 2025

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, December 2025

Released December 9, 2025 · data last refreshed 2026-07-12

Microsoft's December 2025 security release, published December 9, 2025: 55 updates fixing 223 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Updates (KBs)

223

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-24990Windows Agere Modem Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-59230Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-62221Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-60710Host Process for Windows Tasks Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-62215Windows Kernel Elevation of Privilege VulnerabilityCVSS 7.0Exploited

CVE-2025-47827MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11CVSS 4.6Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-49708Microsoft Graphics Component Elevation of Privilege VulnerabilityCVSS 9.9

CVE-2025-60724GDI+ Remote Code Execution VulnerabilityCVSS 9.8

CVE-2025-64678Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-58715Windows Speech Runtime Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-58716Windows Speech Runtime Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-59295Windows URL Parsing Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-58718Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-62456Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-62549Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-64672Microsoft SharePoint Server Spoofing VulnerabilityCVSS 8.8

Products fixed this month

Windows 10 Version 1809 for 32-bit Systems (40)Windows 10 Version 1809 for x64-based Systems (32)Windows Server 2019 (32)Microsoft Office 2019 for 32-bit editions (9)Windows 11 Version 25H2 for ARM64-based Systems (8)Windows 11 Version 25H2 for x64-based Systems (8)Microsoft SharePoint Enterprise Server 2016 (5)Microsoft SharePoint Server 2019 (5)Microsoft Office 2019 for 64-bit editions (5)Microsoft Exchange Server Subscription Edition RTM (4)

Take this release to your AI

Composed from the December 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the December 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-12, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 55 updates (KBs) fixing 223 CVEs, 6 actively exploited (CISA KEV), 0 ransomware-linked, 21 Critical updates.
Actively exploited CVEs: CVE-2025-24990 (CVSS 7.8), CVE-2025-59230 (CVSS 7.8), CVE-2025-62221 (CVSS 7.8), CVE-2025-60710 (CVSS 7.8), CVE-2025-62215 (CVSS 7), CVE-2025-47827 (CVSS 4.6).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← November 2025 January 2026 →