Multiple Vulnerabilities in Microsoft Products · CIAD-2025-0049
CERT-In advisory CIAD-2025-0049 · 10 Dec 2025
Official title
CIAD-2025-0049 : Multiple Vulnerabilities in Microsoft Products
Official record
Open source pageSummary
Check the official recordWhat changed
CERT-In reports multiple vulnerabilities in Microsoft products that allow attackers to gain elevated privileges, obtain sensitive information, or execute remote code. Affected products include Windows, Microsoft Office, Azure, and server software. An attacker can also perform spoofing attacks or cause denial of service. A specific privilege escalation vulnerability in the Windows Cloud Files Mini Filter Driver, identified as CVE-2025-62221, currently faces exploitation in the wild. Users and IT administrators must apply the security updates provided by Microsoft to mitigate these risks. Failure to update systems may result in system compromise, data exfiltration, or ransomware attacks.
What you must do
- Apply the security updates released by Microsoft.
Key dates
- Original Issue Date
- 10 Dec 2025
Who is affected
Document text
CERT-In Advisory CIAD-2025-0049
Multiple Vulnerabilities in Microsoft Products
Original Issue Date: December 10, 2025
Severity Rating: High
Software Affected
Product Family Windows Extended Security Updates (ESU) Microsoft Office Azure Server Software Open Source Software GitHub Copilot Plugin for JetBrains IDEs
Overview
Multiple vulnerabilities have been reported in Microsoft Products which could allow an attacker to gain elevated privileges, obtain sensitive information, conduct remote code execution attacks, perform spoofing attacks or cause denial of service conditions on the targeted system.
Target Audience: Individuals and IT administrators, security teams responsible for maintaining and updating Microsoft products.
Risk Assessment: Risk of remote code execution, system instability or sensitive information disclosure.
Impact Assessment: Potential compromise of system, exfiltration of data, ransomware attacks or system crashes.
Description
Multiple vulnerabilities have been reported in Microsoft Products which could allow an attacker to gain elevated privileges, obtain sensitive information, conduct remote code execution attacks, perform spoofing attacks or cause denial of service conditions on the targeted system.
A privilege escalation vulnerability ( CVE-2025-62221 ) exists in the Windows Cloud Files Mini Filter Driver due to improper memory management, creating a use-after-free scenario that allows an authenticated attacker to escalate privileges when successfully exploited.
Note: This vulnerability is being exploited in the wild. Users are advised to apply patches urgently.
For complete list of affected products, CVEs, workarounds and solutions, refer to the Microsoft security updates. https://msrc.microsoft.com/update-guide/releaseNote/2025-Dec
Solution
Apply the security updates released by Microsoft: https://msrc.microsoft.com/update-guide/releaseNote/2025-Dec
Vendor Information
Microsoft https://msrc.microsoft.com/update-guide/releaseNote/2025-Dec
Source details
- Source
- Indian Computer Emergency Response Team
- Type
- advisory
- Published by source
- 10 Dec 2025
- Document number
- CIAD-2025-0049
- Issuing division
- CERT-In
- Coverage area
- cybersecurity