Microsoft and Adobe Patch Tuesday, December 2025 Security Update Review | Qualys
Summary: Microsoft's December 2025 Patch Tuesday addresses 72 vulnerabilities, including three critical and 55 important-severity flaws, plus three zero-days of which one was exploited and two were publicly disclosed. Adobe released five advisories covering 138 vulnerabilities across ColdFusion, Experience Manager, DNG SDK, Acrobat and Reader, and Creative Cloud Desktop, 15 of them rated critical.
What's compelling: CISA added the exploited zero-day to its Known Exploited Vulnerabilities Catalog and set a patch deadline of December 30, 2025, so the exploited flaw carries a fixed date by which it must be closed.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026