Microsoft has released updates to address multiple vulnerabilities in Microsoft software with Microsoft's December 2025 Patch Tuesday.

Of the fixed vulnerabilities: 28 are elevation of privilege vulnerabilities, 19 are remote code execution vulnerabilities, 4 are information disclosure vulnerabilities, 3 are denial of service vulnerabilities and 2 are Spoofing Vulnerabilities.

This month's Patch Tuesday also includes fixes for 3 zero-day vulnerabilities:

• CVE-2025-62221 - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability;
• CVE-2025-64671 - GitHub Copilot for Jetbrains Remote Code Execution Vulnerability;
• CVE-2025-54100 - PowerShell Remote Code Execution Vulnerability.

More information on vulnerabilities and updates is available in the Microsoft’s December 2025 Security Updates page – microsoft.com.

Source: bleepingcomputer.com