# KB5071413: December 2025 cumulative update for Windows Server 2022 KB5071413, released December 9, 2025, fixes 28 CVEs across 2 products. One of them is being exploited (CVE-2025-62221); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5071413 - Platform: Microsoft - Released: Dec 9, 2025 - Priority: Patch now (Closes CVE-2025-62221, exploited (CISA KEV)) - CVEs: 28, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5071413 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) | | 20348.4467 | | [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) | | 20348.4467 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-62221](https://patchblox.com/security/data/cve/CVE-2025-62221.md) | Patch now | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0251 | CISA KEV | | [CVE-2025-59517](https://patchblox.com/security/data/cve/CVE-2025-59517.md) | Urgent | Windows Storage VSP Driver | 7.8 | 0.0245 | More likely | | [CVE-2025-59516](https://patchblox.com/security/data/cve/CVE-2025-59516.md) | Urgent | Windows Storage VSP Driver | 7.8 | 0.0234 | More likely | | [CVE-2025-62454](https://patchblox.com/security/data/cve/CVE-2025-62454.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0229 | More likely | | [CVE-2025-62472](https://patchblox.com/security/data/cve/CVE-2025-62472.md) | Urgent | Windows Remote Access Connection Manager | 7.8 | 0.0220 | More likely | | [CVE-2025-62458](https://patchblox.com/security/data/cve/CVE-2025-62458.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0066 | More likely | | [CVE-2025-62470](https://patchblox.com/security/data/cve/CVE-2025-62470.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0051 | More likely | | [CVE-2025-62549](https://patchblox.com/security/data/cve/CVE-2025-62549.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0132 | | | [CVE-2025-62456](https://patchblox.com/security/data/cve/CVE-2025-62456.md) | High | Windows Resilient File System (ReFS) | 8.8 | 0.0111 | | | [CVE-2025-62565](https://patchblox.com/security/data/cve/CVE-2025-62565.md) | High | Windows Shell | 7.3 | 0.0057 | | | [CVE-2025-62457](https://patchblox.com/security/data/cve/CVE-2025-62457.md) | High | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0040 | | | [CVE-2025-62466](https://patchblox.com/security/data/cve/CVE-2025-62466.md) | High | Windows Client-Side Caching (CSC) Service | 7.8 | 0.0040 | | | [CVE-2025-55233](https://patchblox.com/security/data/cve/CVE-2025-55233.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62461](https://patchblox.com/security/data/cve/CVE-2025-62461.md) | High | Windows Projected File System Filter Driver | 7.8 | 0.0040 | | | [CVE-2025-62462](https://patchblox.com/security/data/cve/CVE-2025-62462.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62464](https://patchblox.com/security/data/cve/CVE-2025-62464.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62467](https://patchblox.com/security/data/cve/CVE-2025-62467.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62571](https://patchblox.com/security/data/cve/CVE-2025-62571.md) | High | Windows Installer | 7.8 | 0.0040 | | | [CVE-2025-62474](https://patchblox.com/security/data/cve/CVE-2025-62474.md) | High | Windows Remote Access Connection Manager | 7.8 | 0.0037 | | | [CVE-2025-64673](https://patchblox.com/security/data/cve/CVE-2025-64673.md) | High | Storvsp.sys Driver | 7.8 | 0.0037 | | | [CVE-2025-64658](https://patchblox.com/security/data/cve/CVE-2025-64658.md) | High | Windows Shell | 7.5 | 0.0031 | | | [CVE-2025-64661](https://patchblox.com/security/data/cve/CVE-2025-64661.md) | High | Windows Shell | 7.8 | 0.0025 | | | [CVE-2025-62573](https://patchblox.com/security/data/cve/CVE-2025-62573.md) | High | Windows DirectX | 7.0 | 0.0025 | | | [CVE-2025-62473](https://patchblox.com/security/data/cve/CVE-2025-62473.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0108 | | | [CVE-2025-62567](https://patchblox.com/security/data/cve/CVE-2025-62567.md) | Routine | Windows Hyper-V | 5.3 | 0.0103 | | | [CVE-2025-64670](https://patchblox.com/security/data/cve/CVE-2025-64670.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0100 | | | [CVE-2025-62463](https://patchblox.com/security/data/cve/CVE-2025-62463.md) | Routine | Windows DirectX | 6.5 | 0.0046 | | | [CVE-2025-62465](https://patchblox.com/security/data/cve/CVE-2025-62465.md) | Routine | Windows DirectX | 6.5 | 0.0046 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo