# KB5071542: December 2025 cumulative update for Windows Server 23H2 KB5071542, released December 9, 2025, fixes 30 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.2025). One of them is being exploited (CVE-2025-62221); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5071542 - Platform: Microsoft - Released: Dec 9, 2025 - Priority: Patch now (Closes CVE-2025-62221, exploited (CISA KEV)) - CVEs: 30, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5071542 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022, 23H2 Edition (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-23h2-edition-server-core-installation.md) | | 25398.2025 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-62221](https://patchblox.com/security/data/cve/CVE-2025-62221.md) | Patch now | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0251 | CISA KEV | | [CVE-2025-59517](https://patchblox.com/security/data/cve/CVE-2025-59517.md) | Urgent | Windows Storage VSP Driver | 7.8 | 0.0245 | More likely | | [CVE-2025-59516](https://patchblox.com/security/data/cve/CVE-2025-59516.md) | Urgent | Windows Storage VSP Driver | 7.8 | 0.0234 | More likely | | [CVE-2025-62454](https://patchblox.com/security/data/cve/CVE-2025-62454.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0229 | More likely | | [CVE-2025-62472](https://patchblox.com/security/data/cve/CVE-2025-62472.md) | Urgent | Windows Remote Access Connection Manager | 7.8 | 0.0220 | More likely | | [CVE-2025-62468](https://patchblox.com/security/data/cve/CVE-2025-62468.md) | Urgent | Windows Defender Firewall Service | 5.5 | 0.0052 | More likely | | [CVE-2025-62470](https://patchblox.com/security/data/cve/CVE-2025-62470.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0051 | More likely | | [CVE-2025-54100](https://patchblox.com/security/data/cve/CVE-2025-54100.md) | High | Windows PowerShell | 7.8 | 0.0223 | Disclosed | | [CVE-2025-62549](https://patchblox.com/security/data/cve/CVE-2025-62549.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0132 | | | [CVE-2025-62456](https://patchblox.com/security/data/cve/CVE-2025-62456.md) | High | Windows Resilient File System (ReFS) | 8.8 | 0.0111 | | | [CVE-2025-62565](https://patchblox.com/security/data/cve/CVE-2025-62565.md) | High | Windows Shell | 7.3 | 0.0057 | | | [CVE-2025-62457](https://patchblox.com/security/data/cve/CVE-2025-62457.md) | High | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0040 | | | [CVE-2025-62466](https://patchblox.com/security/data/cve/CVE-2025-62466.md) | High | Windows Client-Side Caching (CSC) Service | 7.8 | 0.0040 | | | [CVE-2025-55233](https://patchblox.com/security/data/cve/CVE-2025-55233.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62461](https://patchblox.com/security/data/cve/CVE-2025-62461.md) | High | Windows Projected File System Filter Driver | 7.8 | 0.0040 | | | [CVE-2025-62462](https://patchblox.com/security/data/cve/CVE-2025-62462.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62464](https://patchblox.com/security/data/cve/CVE-2025-62464.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62467](https://patchblox.com/security/data/cve/CVE-2025-62467.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62571](https://patchblox.com/security/data/cve/CVE-2025-62571.md) | High | Windows Installer | 7.8 | 0.0040 | | | [CVE-2025-62474](https://patchblox.com/security/data/cve/CVE-2025-62474.md) | High | Windows Remote Access Connection Manager | 7.8 | 0.0037 | | | [CVE-2025-64673](https://patchblox.com/security/data/cve/CVE-2025-64673.md) | High | Storvsp.sys Driver | 7.8 | 0.0037 | | | [CVE-2025-62569](https://patchblox.com/security/data/cve/CVE-2025-62569.md) | High | Microsoft Brokering File System | 7.0 | 0.0033 | | | [CVE-2025-64658](https://patchblox.com/security/data/cve/CVE-2025-64658.md) | High | Windows Shell | 7.5 | 0.0031 | | | [CVE-2025-64661](https://patchblox.com/security/data/cve/CVE-2025-64661.md) | High | Windows Shell | 7.8 | 0.0025 | | | [CVE-2025-62573](https://patchblox.com/security/data/cve/CVE-2025-62573.md) | High | Windows DirectX | 7.0 | 0.0025 | | | [CVE-2025-62473](https://patchblox.com/security/data/cve/CVE-2025-62473.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0108 | | | [CVE-2025-62567](https://patchblox.com/security/data/cve/CVE-2025-62567.md) | Routine | Windows Hyper-V | 5.3 | 0.0103 | | | [CVE-2025-64670](https://patchblox.com/security/data/cve/CVE-2025-64670.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0100 | | | [CVE-2025-62463](https://patchblox.com/security/data/cve/CVE-2025-62463.md) | Routine | Windows DirectX | 6.5 | 0.0046 | | | [CVE-2025-62465](https://patchblox.com/security/data/cve/CVE-2025-62465.md) | Routine | Windows DirectX | 6.5 | 0.0046 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo