# KB5072033: December 2025 cumulative update for Windows 11 24H2 KB5072033, released December 9, 2025, fixes 34 CVEs across 6 products. 2 of them are being exploited (CVE-2025-60710); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5072033 - Platform: Microsoft - Released: Dec 9, 2025 - Priority: Patch now (Closes CVE-2025-60710, exploited (CISA KEV, ransomware)) - CVEs: 34, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5072033 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 11 Version 24H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-arm64-based-systems.md) | | | | [Windows 11 Version 24H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-x64-based-systems.md) | | | | [Windows 11 Version 25H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-25h2-for-arm64-based-systems.md) | | | | [Windows 11 Version 25H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-25h2-for-x64-based-systems.md) | | | | [Windows Server 2025](https://patchblox.com/security/data/product/microsoft/windows-server-2025.md) | | | | [Windows Server 2025 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2025-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-60710](https://patchblox.com/security/data/cve/CVE-2025-60710.md) | Patch now | Host Process for Windows Tasks | 7.8 | 0.0461 | CISA KEV, Ransomware | | [CVE-2025-62221](https://patchblox.com/security/data/cve/CVE-2025-62221.md) | Patch now | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0251 | CISA KEV | | [CVE-2025-59517](https://patchblox.com/security/data/cve/CVE-2025-59517.md) | Urgent | Windows Storage VSP Driver | 7.8 | 0.0245 | More likely | | [CVE-2025-59516](https://patchblox.com/security/data/cve/CVE-2025-59516.md) | Urgent | Windows Storage VSP Driver | 7.8 | 0.0234 | More likely | | [CVE-2025-62454](https://patchblox.com/security/data/cve/CVE-2025-62454.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0229 | More likely | | [CVE-2025-62472](https://patchblox.com/security/data/cve/CVE-2025-62472.md) | Urgent | Windows Remote Access Connection Manager | 7.8 | 0.0220 | More likely | | [CVE-2025-62468](https://patchblox.com/security/data/cve/CVE-2025-62468.md) | Urgent | Windows Defender Firewall Service | 5.5 | 0.0052 | More likely | | [CVE-2025-62470](https://patchblox.com/security/data/cve/CVE-2025-62470.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0051 | More likely | | [CVE-2025-54100](https://patchblox.com/security/data/cve/CVE-2025-54100.md) | High | Windows PowerShell | 7.8 | 0.0223 | Disclosed | | [CVE-2025-62549](https://patchblox.com/security/data/cve/CVE-2025-62549.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0132 | | | [CVE-2025-62456](https://patchblox.com/security/data/cve/CVE-2025-62456.md) | High | Windows Resilient File System (ReFS) | 8.8 | 0.0111 | | | [CVE-2025-62565](https://patchblox.com/security/data/cve/CVE-2025-62565.md) | High | Windows Shell | 7.3 | 0.0057 | | | [CVE-2025-62570](https://patchblox.com/security/data/cve/CVE-2025-62570.md) | High | Windows Camera Frame Server Monitor | 7.1 | 0.0040 | | | [CVE-2025-62457](https://patchblox.com/security/data/cve/CVE-2025-62457.md) | High | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0040 | | | [CVE-2025-62466](https://patchblox.com/security/data/cve/CVE-2025-62466.md) | High | Windows Client-Side Caching (CSC) Service | 7.8 | 0.0040 | | | [CVE-2025-55233](https://patchblox.com/security/data/cve/CVE-2025-55233.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62461](https://patchblox.com/security/data/cve/CVE-2025-62461.md) | High | Windows Projected File System Filter Driver | 7.8 | 0.0040 | | | [CVE-2025-62462](https://patchblox.com/security/data/cve/CVE-2025-62462.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62464](https://patchblox.com/security/data/cve/CVE-2025-62464.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62467](https://patchblox.com/security/data/cve/CVE-2025-62467.md) | High | Windows Projected File System | 7.8 | 0.0040 | | | [CVE-2025-62571](https://patchblox.com/security/data/cve/CVE-2025-62571.md) | High | Windows Installer | 7.8 | 0.0040 | | | [CVE-2025-62572](https://patchblox.com/security/data/cve/CVE-2025-62572.md) | High | Application Information Services | 7.8 | 0.0040 | | | [CVE-2025-62474](https://patchblox.com/security/data/cve/CVE-2025-62474.md) | High | Windows Remote Access Connection Manager | 7.8 | 0.0037 | | | [CVE-2025-64673](https://patchblox.com/security/data/cve/CVE-2025-64673.md) | High | Storvsp.sys Driver | 7.8 | 0.0037 | | | [CVE-2025-62569](https://patchblox.com/security/data/cve/CVE-2025-62569.md) | High | Microsoft Brokering File System | 7.0 | 0.0033 | | | [CVE-2025-64658](https://patchblox.com/security/data/cve/CVE-2025-64658.md) | High | Windows Shell | 7.5 | 0.0031 | | | [CVE-2025-64661](https://patchblox.com/security/data/cve/CVE-2025-64661.md) | High | Windows Shell | 7.8 | 0.0025 | | | [CVE-2025-62469](https://patchblox.com/security/data/cve/CVE-2025-62469.md) | High | Microsoft Brokering File System | 7.0 | 0.0025 | | | [CVE-2025-62573](https://patchblox.com/security/data/cve/CVE-2025-62573.md) | High | Windows DirectX | 7.0 | 0.0025 | | | [CVE-2025-62473](https://patchblox.com/security/data/cve/CVE-2025-62473.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0108 | | | [CVE-2025-62567](https://patchblox.com/security/data/cve/CVE-2025-62567.md) | Routine | Windows Hyper-V | 5.3 | 0.0103 | | | [CVE-2025-64670](https://patchblox.com/security/data/cve/CVE-2025-64670.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0100 | | | [CVE-2025-62463](https://patchblox.com/security/data/cve/CVE-2025-62463.md) | Routine | Windows DirectX | 6.5 | 0.0046 | | | [CVE-2025-62465](https://patchblox.com/security/data/cve/CVE-2025-62465.md) | Routine | Windows DirectX | 6.5 | 0.0046 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo