Skip to the content
The Update Bureau
Security

KB5072033: all 34 vulnerabilities

Cumulative update for Windows 11, versions 24H2 and 25H2, December 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

34 vulnerabilities fixed
1 exploited 34 important
VulnerabilitySeverityCVSS
CVE-2025-62221 Exploited
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62456
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-62549
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-54100
PowerShell Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-55233
Windows Projected File System Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-59516
Windows Storage VSP Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-59517
Windows Storage VSP Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-60710
Host Process for Windows Tasks Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62454
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62457
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62461
Windows Projected File System Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62462
Windows Projected File System Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62464
Windows Projected File System Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62466
Windows Client-Side Caching Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62467
Windows Projected File System Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62470
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62472
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62474
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62571
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-62572
Application Information Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-64661
Windows Shell Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-64673
Windows Storage VSP Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-64658
Windows File Explorer Elevation of Privilege Vulnerability
 Important 7.5
CVE-2025-62565
Windows File Explorer Elevation of Privilege Vulnerability
 Important 7.3
CVE-2025-62570
Windows Camera Frame Server Monitor Information Disclosure Vulnerability
 Important 7.1
CVE-2025-62469
Microsoft Brokering File System Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62569
Microsoft Brokering File System Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62573
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-62463
DirectX Graphics Kernel Denial of Service Vulnerability
 Important 6.5
CVE-2025-62465
DirectX Graphics Kernel Denial of Service Vulnerability
 Important 6.5
CVE-2025-62473
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-64670
Windows DirectX Information Disclosure Vulnerability
 Important 6.5
CVE-2025-62468
Windows Defender Firewall Service Information Disclosure Vulnerability
 Important 5.5
CVE-2025-62567
Windows Hyper-V Denial of Service Vulnerability
 Important 5.3