The last security patch is New Year's Eve. 🚨

Microsoft released a total of 57 security updates (Patch Tuesday) for December 2025 covering Windows 11, KB5072033 and KB5071417 codes, with one zero-day vulnerability that was actually compromised and two publicly exposed.

.

There are three critical vulnerabilities in this cycle, all of them Remote Code Execution - RCE.

.

A breakdown of the vulnerabilities that have been addressed is as follows:

- Elevation of Privilege vulnerability: 28 items

- Remote Code Execution vulnerability: 19 items

- Information Disclosure: 4 items

- Denial of Service vulnerability: 3 items

- Spoofing vulnerability: 2 items

.

The figures do not include Microsoft Edge (15) and Mariner vulnerabilities that were previously patched in the same month.

.

There are also other software manufacturers issuing December security updates, such as Adobe, Fortinet, Google (Android), Ivanti, React, SAP, with many fixing severe vulnerabilities including Zero-Day being broadly attacked.

.

Administrators are advised to implement Windows updates and Microsoft products ASAP, specifically Zero-Day vulnerabilities and vulnerabilities that can be attacked remotely, with follow-up updates from other software manufacturers to prevent the risk of being compromised by these vulnerabilities.

.

Source: bleepingcomputer

# IT News # Includes IT matters # Cough to know # IT