The Update BureauKB5071547: Cumulative update for Windows Server, version 2022, December 2025. Exploited Cloud Files driver flaw patched; WSUS still hides sync errors
In short
The update fixes 29 Important vulnerabilities, including an exploited Cloud Files Mini Filter Driver flaw and a publicly disclosed PowerShell flaw. WSUS synchronization error details remain unavailable after KB5070884 or later.
Does it affect you? Applies to: Devices running Windows Server 2022, including x64 systems. The update brings the OS build to 20348.4529.
What changes
Improvement 1 change
Servicing stack
-
The component that installs Windows updates receives quality improvements.1
Includes servicing stack update KB5068786, build 20348.4400.
New feature 1 change
PowerShell 5.1
For: PowerShell 5.1 users
-
Invoke-WebRequest now shows a security warning and asks whether to continue or cancel a request that could run scripts.2
The confirmation prompt applies to
Invoke-WebRequestin PowerShell 5.1.
Known issues
-
Windows Server Update Services (WSUS) does not display error details
After installing KB5070884 or later updates, WSUS does not display synchronization error details in its error reporting.3
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-12-09
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
-
KB5068787, KB5070884, KB5066782, KB5065432
+27 earlier
KB5063880, KB5062572, KB5060526, KB5061906, KB5058385, KB5059092, KB5058920, KB5055526, KB5053603, KB5051979, KB5052819, KB5049983, KB5048654, KB5046616, KB5047767, KB5044281, KB5042881, KB5041160, KB5040437, KB5041054, KB5039227, KB5037782, KB5036909, KB5037422, KB5035857, KB5034770, KB5034129 - Replaced by
- KB5073457
| Version | Build | Channel |
|---|---|---|
| 2022 | 20348.4529 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2025-62221
Exploited
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
Important | 8.8 |
|
PowerShell Remote Code Execution Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Storage VSP Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Storage VSP Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Win32k Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Client-Side Caching Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Projected File System Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Installer Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Shell Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows Storage VSP Driver Elevation of Privilege Vulnerability
|
Important | 7.8 |
|
Windows File Explorer Elevation of Privilege Vulnerability
|
Important | 7.5 |
|
Windows File Explorer Elevation of Privilege Vulnerability
|
Important | 7.3 |
|
DirectX Graphics Kernel Elevation of Privilege Vulnerability
|
Important | 7.0 |
|
DirectX Graphics Kernel Denial of Service Vulnerability
|
Important | 6.5 |
|
DirectX Graphics Kernel Denial of Service Vulnerability
|
Important | 6.5 |
|
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
|
Important | 6.5 |
|
Windows DirectX Information Disclosure Vulnerability
|
Important | 6.5 |
|
Windows Hyper-V Denial of Service Vulnerability
|
Important | 5.3 |
Downloads (Microsoft Update Catalog)
x64
2022
412.1 MB
Updated components
145 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Graphics and display | 6 |
| File Explorer and shell | 5 |
| Kernel | 3 |
| Security and sign-in | 3 |
| Storage and file systems | 3 |
| Hyper-V and virtualization | 2 |
| Search | 1 |
| Secure Boot | 1 |
| Settings | 1 |
Sources
Updated
Cited passages from Microsoft's official notes (3)
-
1.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
2.
[PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request.
support.microsoft.com -
3.
After installing KB5070884 or later updates, Windows Server Update Services (WSUS) does not display synchronization error details within its error reporting.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake