{"id":59818,"date":"2025-12-09T23:42:11","date_gmt":"2025-12-09T23:42:11","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-reports-7-8-rated-zero-day-plus-56-more-in-december-patch-tuesday\/"},"modified":"2025-12-09T23:42:11","modified_gmt":"2025-12-09T23:42:11","slug":"microsoft-reports-7-8-rated-zero-day-plus-56-more-in-december-patch-tuesday","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-reports-7-8-rated-zero-day-plus-56-more-in-december-patch-tuesday\/","title":{"rendered":"Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday"},"content":{"rendered":"

Happy December Patch Tuesday to all who celebrate. This month’s patch party includes one Microsoft flaw under exploitation, plus two others listed as publicly known \u2013 but just 57 CVEs in total from Redmond.<\/p>\n

There’s also a fix for a critical Notepad++ bug that, according to security sleuth Kevin Beaumont, is being abused by attackers in China.<\/p>\n

Plus, software security vendors Ivanti and Fortinet both issued patches for critical security holes in their products, so those two should be high on sys-admins’ and security teams’ list of things to do today.<\/p>\n

Microsoft patches<\/h3>\n

Let\u2019s start our look at Microsoft’s relatively quiet final patch-a-thon for 2025 by considering CVE-2025-62221<\/a>, a 7.8-CVSS-rated Windows Cloud Files Mini Filter Driver vulnerability that allows an authorized attacker to elevate privileges locally.<\/p>\n

This one was exploited as a zero-day, according to Redmond, and while we don’t yet know who is abusing this security hole, “privilege escalation vulnerabilities are observed in almost every incident involving host compromises, making this a critical vulnerability to patch to limit an attacker’s capabilities,” Kev Breen, senior director of cyber threat research at Immersive, told The Register<\/em>.<\/p>\n