A Big Finish To 2025 In December's Patch Tuesday
Sophos, December 11,2025
A month with no Critical-severity Windows bugs is overshadowed by a mass of Mariner mop-up
Microsoft on Tuesday released 56 patches affecting 10 product families. Two of the addressed issues are considered by Microsoft to be of Critical severity - and, unusually, both belong to the blended Office-365 product family. Eight have a CVSS base score of 8.0 or higher. One is known to be under active exploit in the wild, and two others are publicly disclosed.
That's the good news. We'll get to the advisories in a moment.