# Security updates released in December 2025 - Web page: https://patchblox.com/security/patch-radar/2025/12 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 32 | 52 | 8 | 8 | | macOS | 3 | 54 | 1 | 1 | | Linux | 2,604 | 1,918 | 95 | 95 | ## Patch Tuesday, December 9, 2025 72 CVEs, 0 Critical, 1 exploited, 1 publicly disclosed, in 29 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 36 | 2 | 2 | | Windows 11 | 35 | 2 | 2 | | Windows 10 | 28 | 1 | 1 | | Microsoft Office | 13 | 0 | 0 | | SharePoint Server | 5 | 0 | 0 | | Exchange Server | 2 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5072033](https://patchblox.com/security/data/fix/microsoft/kb5072033.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 3 more | Dec 9, 2025 | Patch now | 34 | 2 | CVE-2025-60710 | | [KB5072014](https://patchblox.com/security/data/fix/microsoft/kb5072014.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 3 more | Dec 9, 2025 | Patch now | 33 | 2 | CVE-2025-60710 | | [KB5071417](https://patchblox.com/security/data/fix/microsoft/kb5071417.md) | Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems | Dec 9, 2025 | Patch now | 30 | 1 | CVE-2025-62221 | | [KB5071542](https://patchblox.com/security/data/fix/microsoft/kb5071542.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Dec 9, 2025 | Patch now | 30 | 1 | CVE-2025-62221 | | [KB5071547](https://patchblox.com/security/data/fix/microsoft/kb5071547.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Dec 9, 2025 | Patch now | 29 | 1 | CVE-2025-62221 | | [KB5071413](https://patchblox.com/security/data/fix/microsoft/kb5071413.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Dec 9, 2025 | Patch now | 28 | 1 | CVE-2025-62221 | | [KB5071546](https://patchblox.com/security/data/fix/microsoft/kb5071546.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Dec 9, 2025 | Patch now | 28 | 1 | CVE-2025-62221 | | [KB5071544](https://patchblox.com/security/data/fix/microsoft/kb5071544.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Dec 9, 2025 | Patch now | 26 | 1 | CVE-2025-62221 | | [KB5071543](https://patchblox.com/security/data/fix/microsoft/kb5071543.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Dec 9, 2025 | Urgent | 15 | 0 | CVE-2025-59517 | | [KB5071503](https://patchblox.com/security/data/fix/microsoft/kb5071503.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Dec 9, 2025 | Urgent | 11 | 0 | CVE-2025-62472 | | [KB5071501](https://patchblox.com/security/data/fix/microsoft/kb5071501.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Dec 9, 2025 | Urgent | 10 | 0 | CVE-2025-62472 | | [KB5071505](https://patchblox.com/security/data/fix/microsoft/kb5071505.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Dec 9, 2025 | Urgent | 10 | 0 | CVE-2025-62472 | | [KB5071506](https://patchblox.com/security/data/fix/microsoft/kb5071506.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Dec 9, 2025 | Urgent | 10 | 0 | CVE-2025-62472 | | [KB5071504](https://patchblox.com/security/data/fix/microsoft/kb5071504.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Dec 9, 2025 | Urgent | 8 | 0 | CVE-2025-62472 | | [KB5071507](https://patchblox.com/security/data/fix/microsoft/kb5071507.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Dec 9, 2025 | Urgent | 8 | 0 | CVE-2025-62472 | | [KB5002819](https://patchblox.com/security/data/fix/microsoft/kb5002819.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Dec 17, 2025 | Urgent | 2 | 0 | CVE-2025-62554 | | [KB5074204](https://patchblox.com/security/data/fix/microsoft/kb5074204.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 3 more | Dec 18, 2025 | High | 1 | 0 | CVE-2025-54100 | | [KB5074353](https://patchblox.com/security/data/fix/microsoft/kb5074353.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Dec 18, 2025 | High | 1 | 0 | CVE-2025-54100 | | [KB5002815](https://patchblox.com/security/data/fix/microsoft/kb5002815.md) | Microsoft SharePoint Server Subscription Edition | Dec 9, 2025 | High | 1 | 0 | CVE-2025-64672 | | [KB5071873](https://patchblox.com/security/data/fix/microsoft/kb5071873.md) | Microsoft Exchange Server 2016 Cumulative Update 23 | Dec 9, 2025 | High | 2 | 0 | CVE-2025-64666 | | [KB5071874](https://patchblox.com/security/data/fix/microsoft/kb5071874.md) | Microsoft Exchange Server 2019 Cumulative Update 14 | Dec 9, 2025 | High | 2 | 0 | CVE-2025-64666 | | [KB5071875](https://patchblox.com/security/data/fix/microsoft/kb5071875.md) | Microsoft Exchange Server 2019 Cumulative Update 15 | Dec 9, 2025 | High | 2 | 0 | CVE-2025-64666 | | [KB5071876](https://patchblox.com/security/data/fix/microsoft/kb5071876.md) | Microsoft Exchange Server Subscription Edition RTM | Dec 9, 2025 | High | 2 | 0 | CVE-2025-64666 | | [KB5002802](https://patchblox.com/security/data/fix/microsoft/kb5002802.md) | Microsoft SharePoint Server 2019 | Dec 9, 2025 | High | 4 | 0 | CVE-2025-62562 | | [KB5002804](https://patchblox.com/security/data/fix/microsoft/kb5002804.md) | Microsoft SharePoint Enterprise Server 2016 | Dec 9, 2025 | High | 4 | 0 | CVE-2025-62562 | | [KB5002806](https://patchblox.com/security/data/fix/microsoft/kb5002806.md) | Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | Dec 9, 2025 | High | 4 | 0 | CVE-2025-62562 | | [KB5002816](https://patchblox.com/security/data/fix/microsoft/kb5002816.md) | Microsoft SharePoint Server 2019 | Dec 9, 2025 | High | 4 | 0 | CVE-2025-62562 | | [KB5002821](https://patchblox.com/security/data/fix/microsoft/kb5002821.md) | Microsoft SharePoint Enterprise Server 2016 | Dec 9, 2025 | High | 4 | 0 | CVE-2025-62562 | | [KB5002820](https://patchblox.com/security/data/fix/microsoft/kb5002820.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Dec 9, 2025 | High | 6 | 0 | CVE-2025-62553 | | [KB5002818](https://patchblox.com/security/data/fix/microsoft/kb5002818.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Dec 9, 2025 | High | 3 | 0 | CVE-2025-62553 | | [KB5002817](https://patchblox.com/security/data/fix/microsoft/kb5002817.md) | Office Online Server | Dec 9, 2025 | High | 5 | 0 | CVE-2025-62563 | | [KB5002812](https://patchblox.com/security/data/fix/microsoft/kb5002812.md) | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) | Dec 9, 2025 | High | 1 | 0 | CVE-2025-62552 | ## macOS updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [Tahoe 26.2](https://patchblox.com/security/data/fix/macos/tahoe-26.2.md) | Tahoe | Dec 12, 2025 | Patch now | 52 | 2 | CVE-2025-14174 | | [Sequoia 15.7.3](https://patchblox.com/security/data/fix/macos/sequoia-15.7.3.md) | Sequoia | Dec 12, 2025 | Urgent | 25 | 0 | CVE-2025-46287 | | [Sonoma 14.8.3](https://patchblox.com/security/data/fix/macos/sonoma-14.8.3.md) | Sonoma | Dec 12, 2025 | Urgent | 21 | 0 | CVE-2025-46287 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Debian | 1,273 | 1,248 | 5 | 5 | | Ubuntu | 865 | 73 | 75 | 75 | | ol | 110 | 263 | 4 | 4 | | rocky | 90 | 228 | 7 | 7 | | almalinux | 75 | 135 | 4 | 4 | | Red Hat | 62 | 157 | 0 | 0 | | sles | 57 | 308 | 0 | 0 | | opensuse-leap | 31 | 238 | 0 | 0 | | amzn | 29 | 91 | 0 | 0 | | Fedora | 12 | 21 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [ALSA-2025:23663](https://patchblox.com/security/data/fix/linux/alsa-2025-23663.md) | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on almalinux 8 | Dec 18, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-4.0 2.50.4-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-4.0-2.50.4-0ubuntu0.22.04.1.md) | gir1.2-javascriptcoregtk-4.0 on Ubuntu 22.04.1 LTS (jammy) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-4.1 2.50.4-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-4.1-2.50.4-0ubuntu0.22.04.1.md) | gir1.2-javascriptcoregtk-4.1 on Ubuntu 22.04.1 LTS (jammy) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-4.1 2.50.4-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gir1.2-javascriptcoregtk-4.1-2.50.4-0ubuntu0.24.04.1.md) | gir1.2-javascriptcoregtk-4.1 on Ubuntu 24.04.5 LTS (noble) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-4.1 2.50.4-0ubuntu0.25.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-gir1.2-javascriptcoregtk-4.1-2.50.4-0ubuntu0.25.10.1.md) | gir1.2-javascriptcoregtk-4.1 on Ubuntu 25.10 (questing) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-6.0 2.50.4-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-6.0-2.50.4-0ubuntu0.22.04.1.md) | gir1.2-javascriptcoregtk-6.0 on Ubuntu 22.04.1 LTS (jammy) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-6.0 2.50.4-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gir1.2-javascriptcoregtk-6.0-2.50.4-0ubuntu0.24.04.1.md) | gir1.2-javascriptcoregtk-6.0 on Ubuntu 24.04.5 LTS (noble) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-6.0 2.50.4-0ubuntu0.25.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-gir1.2-javascriptcoregtk-6.0-2.50.4-0ubuntu0.25.10.1.md) | gir1.2-javascriptcoregtk-6.0 on Ubuntu 25.10 (questing) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-webkit-6.0 2.50.4-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-webkit-6.0-2.50.4-0ubuntu0.22.04.1.md) | gir1.2-webkit-6.0 on Ubuntu 22.04.1 LTS (jammy) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-webkit-6.0 2.50.4-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gir1.2-webkit-6.0-2.50.4-0ubuntu0.24.04.1.md) | gir1.2-webkit-6.0 on Ubuntu 24.04.5 LTS (noble) | Dec 17, 2025 | Patch now | 7 | 2 | CVE-2025-14174 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo