)
)
)
)
Summary
Ryan Braunstein, Mat Lee, and Seth Hoyt cover three high-impact vulnerabilities closing out 2025, and why a light patch month heading into the holidays still carries real risk. Mat Lee covers CVE-2025-62550, an Azure Monitor Agent remote code execution flaw that abuses the syslog user to move stealthily and tamper with the logs defenders rely on. Seth Hoyt details CVE-2025-62565, a Windows File Explorer use-after-free that escalates to system level, where selecting a malicious file to load a preview or metadata can be enough to trigger it. The blog companion adds React2Shell (CVE-2025-55182), an unauthenticated RCE in React Server Components that can reach you through bundled dependencies even if you don't think of yourself as a React shop.
)
)
)