Microsoft Patch Tuesday for December 2025 — Snort rules and prominent vulnerabilities

🗓️ 09 Dec 2025 23:29:51Reported by Joey ChenType

talosblog🔗 blog.talosintelligence.com👁 21 Views

December 2025 Patch Tuesday fixes 57 flaws, including two critical Outlook and Office remote code execution flaws.

Reporter	Title	Published	Views	Family All 227
GithubExploit	Exploit for Use After Free in Microsoft	11 Dec 202504:55	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	10 Dec 202518:10	–	githubexploit
ATTACKERKB	CVE-2025-62553	9 Dec 202517:55	–	attackerkb
Information Security Automation	January “In the Trend of VM” (#23): vulnerabilities in Windows, React and MongoDB	26 Jan 202613:52	–	avleonov
BDU FSTEC	The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.	10 Dec 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs, related to unreliable pointer dereferencing, allowing attackers to execute arbitrary code.	10 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Storage VSP Driver for Windows operating systems allows attackers to exploit their privileges.	10 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Remote Access Connection Manager (RASMan) service in Windows operating systems allows a hacker to increase their privileges.	10 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Storage VSP Driver for Windows operating systems allows attackers to exploit their privileges.	10 Dec 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs, related to the use of memory after it is released, allowing an attacker to execute arbitrary code.	10 Dec 202500:00	–	bdu_fstec