Microsoft · ServicingStack update · December 9, 2025
KB5071542: December 2025 cumulative update for Windows Server 23H2
KB5071542, released December 9, 2025, fixes 30 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.2025). One of them is being exploited (CVE-2025-62221); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
30
None rated Critical
Exploited
1
CVE-2025-62221
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.0251
84th percentile
Priority of the 30 CVEs
Patch now 1
Urgent 6
High 18
Routine 5
Applies to
| Product | Build after install |
|---|---|
| Windows Server 2022, 23H2 Edition (Server Core installation) | 25398.2025 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-62221 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.0251 | KEVExploited |
| Urgent | CVE-2025-59517 | Windows Storage VSP Driver | Elevation of Privilege | 7.8 | 0.0245 | More likely |
| Urgent | CVE-2025-59516 | Windows Storage VSP Driver | Elevation of Privilege | 7.8 | 0.0234 | More likely |
| Urgent | CVE-2025-62454 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.0229 | More likely |
| Urgent | CVE-2025-62472 | Windows Remote Access Connection Manager | Elevation of Privilege | 7.8 | 0.0220 | More likely |
| Urgent | CVE-2025-62468 | Windows Defender Firewall Service | Information Disclosure | 5.5 | 0.0052 | More likely |
| Urgent | CVE-2025-62470 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0051 | More likely |
| High | CVE-2025-54100 | Windows PowerShell | Remote Code Execution | 7.8 | 0.0223 | DisclosedExploitation Less Likely |
| High | CVE-2025-62549 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0132 | Exploitation Less Likely |
| High | CVE-2025-62456 | Windows Resilient File System (ReFS) | Remote Code Execution | 8.8 | 0.0111 | Exploitation Unlikely |
| High | CVE-2025-62565 | Windows Shell | Elevation of Privilege | 7.3 | 0.0057 | Exploitation Less Likely |
| High | CVE-2025-62457 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Unlikely |
| High | CVE-2025-62466 | Windows Client-Side Caching (CSC) Service | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Less Likely |
| High | CVE-2025-55233 | Windows Projected File System | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Unlikely |
| High | CVE-2025-62461 | Windows Projected File System Filter Driver | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Less Likely |
| High | CVE-2025-62462 | Windows Projected File System | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Unlikely |
| High | CVE-2025-62464 | Windows Projected File System | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Less Likely |
| High | CVE-2025-62467 | Windows Projected File System | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Less Likely |
| High | CVE-2025-62571 | Windows Installer | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Less Likely |
| High | CVE-2025-62474 | Windows Remote Access Connection Manager | Elevation of Privilege | 7.8 | 0.0037 | Exploitation Less Likely |
| High | CVE-2025-64673 | Storvsp.sys Driver | Elevation of Privilege | 7.8 | 0.0037 | Exploitation Less Likely |
| High | CVE-2025-62569 | Microsoft Brokering File System | Elevation of Privilege | 7.0 | 0.0033 | Exploitation Less Likely |
| High | CVE-2025-64658 | Windows Shell | Elevation of Privilege | 7.5 | 0.0031 | Exploitation Less Likely |
| High | CVE-2025-64661 | Windows Shell | Elevation of Privilege | 7.8 | 0.0025 | Exploitation Less Likely |
| High | CVE-2025-62573 | Windows DirectX | Elevation of Privilege | 7.0 | 0.0025 | Exploitation Less Likely |
Showing 1 to 25 of 30
1Next