Microsoft · Security update · December 9, 2025

KB5071544: December 2025 cumulative update for Windows 10 1809

KB5071544, released December 9, 2025, fixes 26 CVEs across 4 products. One of them is being exploited (CVE-2025-62221); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
26
None rated Critical
Exploited
1
CVE-2025-62221
Exploitation more likely
6
Microsoft's assessment
Highest EPSS
0.0251
84th percentile

Priority of the 26 CVEs

Patch now 1 Urgent 6 High 17 Routine 2

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-62221 Windows Cloud Files Mini Filter DriverElevation of Privilege7.8 0.0251 KEVExploited
Urgent CVE-2025-59517 Windows Storage VSP DriverElevation of Privilege7.8 0.0245 More likely
Urgent CVE-2025-59516 Windows Storage VSP DriverElevation of Privilege7.8 0.0234 More likely
Urgent CVE-2025-62454 Windows Cloud Files Mini Filter DriverElevation of Privilege7.8 0.0229 More likely
Urgent CVE-2025-62472 Windows Remote Access Connection ManagerElevation of Privilege7.8 0.0220 More likely
Urgent CVE-2025-62458 Windows Win32K - GRFXElevation of Privilege7.8 0.0066 More likely
Urgent CVE-2025-62470 Windows Common Log File System DriverElevation of Privilege7.8 0.0051 More likely
High CVE-2025-54100 Windows PowerShellRemote Code Execution7.8 0.0223 DisclosedExploitation Less Likely
High CVE-2025-62549 Windows Routing and Remote Access Service (RRAS)Remote Code Execution8.8 0.0132 Exploitation Less Likely
High CVE-2025-62565 Windows ShellElevation of Privilege7.3 0.0057 Exploitation Less Likely
High CVE-2025-62455 Windows Message QueuingElevation of Privilege7.8 0.0047 Exploitation Less Likely
High CVE-2025-62457 Windows Cloud Files Mini Filter DriverElevation of Privilege7.8 0.0040 Exploitation Unlikely
High CVE-2025-62466 Windows Client-Side Caching (CSC) ServiceElevation of Privilege7.8 0.0040 Exploitation Less Likely
High CVE-2025-55233 Windows Projected File SystemElevation of Privilege7.8 0.0040 Exploitation Unlikely
High CVE-2025-62461 Windows Projected File System Filter DriverElevation of Privilege7.8 0.0040 Exploitation Less Likely
High CVE-2025-62462 Windows Projected File SystemElevation of Privilege7.8 0.0040 Exploitation Unlikely
High CVE-2025-62464 Windows Projected File SystemElevation of Privilege7.8 0.0040 Exploitation Less Likely
High CVE-2025-62467 Windows Projected File SystemElevation of Privilege7.8 0.0040 Exploitation Less Likely
High CVE-2025-62571 Windows InstallerElevation of Privilege7.8 0.0040 Exploitation Less Likely
High CVE-2025-62474 Windows Remote Access Connection ManagerElevation of Privilege7.8 0.0037 Exploitation Less Likely
High CVE-2025-64673 Storvsp.sys DriverElevation of Privilege7.8 0.0037 Exploitation Less Likely
High CVE-2025-64658 Windows ShellElevation of Privilege7.5 0.0031 Exploitation Less Likely
High CVE-2025-64661 Windows ShellElevation of Privilege7.8 0.0025 Exploitation Less Likely
High CVE-2025-62573 Windows DirectXElevation of Privilege7.0 0.0025 Exploitation Less Likely
Routine CVE-2025-62473 Windows Routing and Remote Access Service (RRAS)Information Disclosure6.5 0.0108 Exploitation Less Likely
Showing 1 to 25 of 26 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.