Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071546 KB5072033 KB5072014 · MSRC
CVE tracker
Microsoft Patch Tuesday
What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.
All CVEs – Patch Tuesday December 2025
65 vulnerabilities
Azure Container Apps Remote Code Execution Vulnerability
Azure · MSRC
Microsoft Partner Center Elevation of Privilege Vulnerability
Azure · MSRC
Custom Question Answering Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Azure Cosmos DB Spoofing Vulnerability
Azure · MSRC
Office Out-of-Box Experience Spoofing Vulnerability
Microsoft Office · MSRC
Microsoft Purview eDiscovery Remote Code Execution Vulnerability
Microsoft Office · MSRC
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Azure Monitor Agent Remote Code Execution Vulnerability
Azure · MSRC
Microsoft SharePoint Server Spoofing Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5068791 KB5068787 KB5068840 KB5068781 · MSRC
GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
Other · MSRC
PowerShell Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5074353 KB5071546 · MSRC
Windows Projected File System Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5072033 KB5072014 KB5071544 KB5071547 · MSRC
Windows Storage VSP Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Storage VSP Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5072033 KB5072014 KB5071544 KB5071547 · MSRC
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071546 KB5071543 KB5071504 · MSRC
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5072033 KB5072014 KB5071544 KB5071547 · MSRC
Win32k Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Projected File System Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5072033 KB5072014 KB5071544 KB5071547 · MSRC
Windows Projected File System Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Projected File System Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5072033 KB5072014 KB5071544 KB5071547 · MSRC
Windows Client-Side Caching Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Projected File System Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5072033 KB5072014 KB5071544 KB5071547 · MSRC
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Microsoft Access Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002821 KB5002804 KB5002816 KB5002802 · MSRC
Microsoft Word Remote Code Execution Vulnerability
Microsoft Office · KB5002821 KB5002804 KB5002816 KB5002802 · MSRC
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Office · KB5002821 KB5002804 KB5002816 KB5002802 · MSRC
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Windows Installer Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Application Information Service Elevation of Privilege Vulnerability
Windows Shell Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows Admin Center Elevation of Privilege Vulnerability
Windows · MSRC
Windows Storage VSP Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Windows DWM Core Library Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5066586 KB5066782 KB5066791 KB5066793 · MSRC
Windows DWM Core Library Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5066586 KB5066782 KB5066791 KB5066793 · MSRC
Windows File Explorer Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5071544 KB5071547 KB5071413 KB5071546 · MSRC
Microsoft Exchange Server Elevation of Privilege Vulnerability
Windows ESU (Extended Security Updates), Server software (Exchange, SharePoint …) · KB5071875 KB5071873 KB5071876 KB5071874 · MSRC
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.