Today is the monthly Windows Update day, and Microsoft Office has a critical vulnerability

Windows Update, the monthly update that delivers security updates and bug fixes for Windows, has been released. The newly released security updates, KB5072033 and KB5071417 , include patches for 57 flaws, including the Windows Cloud Files Mini Filter driver privilege escalation zero-day vulnerability CVE-2025-62221 . Installing these updates will change the build number of Windows 11 25H2 (KB5072033) to 26200.7462 (26100.7462 for 24H2) and 23H2 (KB5068865) to 226x1.6050.

December 2025 security updates (monthly)
https://www.microsoft.com/en-us/msrc/blog/2025/12/202512-security-update

The December 2025 Microsoft Monthly Security Updates have been released. Updates are automatically installed by default. For organizations that manage updates, we have published an overview on our blog. Please refer to this and deploy updates as soon as possible. https://t.co/Gy7uBjiSGw #security #updates … pic.twitter.com/pIYAdLwVig

— Microsoft Security Team (@JSECTEAM) December 9, 2025

The list of security updates released is as follows:

Among the vulnerabilities fixed in this month's security update are the following three zero-day vulnerabilities, of which Microsoft reports that CVE-2025-62221 is 'actively being exploited.'
CVE-2025-62221 : Privilege Escalation Vulnerability in Windows Cloud Files Mini Filter Driver
CVE-2025-54100 : PowerShell remote code execution vulnerability
CVE-2025-64671 : Remote code execution vulnerability in GitHub Copilot for Jetbrains

The other 54 vulnerabilities are as follows:

The contents of KB5072033 and KB5071417 other than the security updates are as follows:
- In File Explorer, dialogs and progress bars for operations such as copy, move, and delete now support dark mode.
The File Explorer context menu has been simplified, consolidating common actions like share, copy, and move into a single menu.
- The 'Virtual Workspaces' feature has been added to 'System' > 'Advanced Settings' in Settings, allowing you to manage virtual environments such as Hyper-V and Windows Sandbox.
- If you have Windows Spotlight set as your desktop background, you can now view background details and switch to the next background from the context menu.
The Full Screen Experience (FSE) for handheld games is now available on more devices, providing a console-like interface.
- When using a pen that supports haptic feedback, you can now get a tactile response through vibration when operating windows, etc.
- Improved backlight performance on supported keyboards, improving visibility in low light environments.
- A mobile device management page has been added to the 'Bluetooth and Devices' settings.
- The keyboard character repeat settings and cursor blink rate settings that were previously in the Control Panel have been moved to 'Accessibility' in the Settings app.
- Updated animation when hovering over app icons on the taskbar.
- Added the ability to share open app windows with Copilot directly from the taskbar and have conversations about the contents.
- You can now select a default dashboard in the widget board, and the notification count is now displayed in the navigation bar.
- The Windows Shared Drag Tray now supports sharing multiple files.
- On high-resolution monitors, the stuttering that occurred when the app was querying supported modes has been fixed.
The Quick Machine Recovery (QMR) feature now automatically performs a one-time scan and repair on enabled PCs.

Additionally, KB5071546 has been released as an extended security update for Windows 10. After applying this update, the build number of Windows 10 will be 19045.6691, and that of Windows 10 Enterprise LTSC 2021 will be 19044.6691. Note that new features will no longer be added to Windows 10, so this update is limited to security fixes and bug fixes that occurred in previous updates.

KB5071546 addresses CVE-2025-54100 , a zero-day remote code execution vulnerability in PowerShell. This vulnerability allows malicious scripts embedded in a web page to be executed when using the 'Invoke-WebRequest' command to retrieve the page. As a countermeasure, PowerShell 5.1, the standard for Windows 10, now displays a confirmation prompt warning of the risk of script execution when executing the command. It is recommended to use the '-UseBasicParsing' argument for untrusted pages.