Story perspectives
Microsoft Addresses 57 Vulnerabilities, Including Three Zero-Days
12/10/2025
35 7
1 of 1
Story summary
- Microsoft released patches for 57 vulnerabilities, including three zero-days, on December 9, 2025.
- The exploited zero-day CVE-2025-62221 allows attackers to elevate privileges on Windows devices.
- CVE-2025-62454 poses an exploitation risk.
- Ivanti fixed a critical bug in its Endpoint Manager that could enable remote code execution.
- Notepad++ and Fortinet issued critical patches for security flaws.
