Patch days / April 2025

Microsoft Patch Tuesday — April 2025

Tuesday, 8 April 2025

Vulnerabilities: 119
Critical: 0
High: 97
Zero-days: 1
Public exploit: 7

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2025-29824 Zero-day Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 19%

Public exploit code 6

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2025-27740 Public exploit Active Directory Certificate Services Elevation of Privilege Vulnerability
EPSS 3.5%
High 8.1
CVE-2025-27480 Public exploit Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 13%
High 7.8
CVE-2025-27751 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2025-21204 Public exploit Windows Process Activation Elevation of Privilege Vulnerability
EPSS 7.1%
High 7.5
CVE-2025-26686 Public exploit Windows TCP/IP Remote Code Execution Vulnerability
EPSS 1.4%
High 7.5
CVE-2025-29810 Public exploit Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 2.6%

All vulnerabilities 119

High97 Show

High 7.8
CVE-2025-29824 Zero-day Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 19%
High 8.8
CVE-2025-27740 Public exploit Active Directory Certificate Services Elevation of Privilege Vulnerability
EPSS 3.5%
High 8.8
CVE-2025-21205 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21221 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21222 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-26647 Windows Kerberos Elevation of Privilege Vulnerability
EPSS 2.3%
High 8.8
CVE-2025-26669 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.5%
High 8.8
CVE-2025-27477 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2025-27481 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-29794 Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 4.9%
High 8.6
CVE-2025-27737 Windows Security Zone Mapping Security Feature Bypass Vulnerability
High 8.4
CVE-2025-26678 Windows Defender Application Control Security Feature Bypass Vulnerability
High 8.1
CVE-2025-27480 Public exploit Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 13%
High 8.1
CVE-2025-26663 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.1
CVE-2025-26670 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
EPSS 11%
High 8.1
CVE-2025-26671 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2025-27482 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.6%
High 8.0
CVE-2025-27487 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 1.5%
High 7.8
CVE-2025-27751 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2025-21204 Public exploit Windows Process Activation Elevation of Privilege Vulnerability
EPSS 7.1%
High 7.8
CVE-2025-24058 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24060 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24062 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24073 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24074 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-26639 Windows USB Print Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-26642 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-26648 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2025-26666 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2025-26674 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2025-26675 Windows Subsystem for Linux Elevation of Privilege Vulnerability
High 7.8
CVE-2025-26679 RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-26688 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27467 Windows Digital Media Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27476 Windows Digital Media Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27483 NTFS Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27489 Azure Local Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27490 Windows Bluetooth Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27727 Windows Installer Elevation of Privilege Vulnerability
EPSS 1%
High 7.8
CVE-2025-27728 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27729 Windows Shell Remote Code Execution Vulnerability
High 7.8
CVE-2025-27730 Windows Digital Media Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27731 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27733 NTFS Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27739 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27741 NTFS Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27743 Microsoft System Center Elevation of Privilege Vulnerability
High 7.8
CVE-2025-27744 Microsoft Office Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2025-27745 Microsoft Office Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-27746 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-27747 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-27748 Microsoft Office Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-27749 Microsoft Office Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-27750 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-27752 Microsoft Excel Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-29791 Microsoft Excel Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-29800 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-29801 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-29811 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-29812 DirectX Graphics Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2025-29820 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability
High 7.8
CVE-2025-29823 Microsoft Excel Remote Code Execution Vulnerability
High 7.5
CVE-2025-26686 Public exploit Windows TCP/IP Remote Code Execution Vulnerability
EPSS 1.4%
High 7.5
CVE-2025-29810 Public exploit Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 2.6%
High 7.5
CVE-2025-21174 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2025-26641 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2025-26652 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2025-26668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.3%
High 7.5
CVE-2025-26673 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
EPSS 2.7%
High 7.5
CVE-2025-26680 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2%
High 7.5
CVE-2025-26682 ASP.NET Core and Visual Studio Denial of Service Vulnerability
EPSS 1.7%
High 7.5
CVE-2025-26687 Win32k Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.5
CVE-2025-27469 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2025-27470 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2025-27473 HTTP.sys Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2025-27479 Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2025-27484 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
High 7.5
CVE-2025-27485 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2025-27486 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2025-29805 Outlook for Android Information Disclosure Vulnerability
EPSS 1.6%
High 7.5
CVE-2025-29816 Microsoft Word Security Feature Bypass Vulnerability
High 7.3
CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability
EPSS 1.4%
High 7.3
CVE-2025-29792 Microsoft Office Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.3
CVE-2025-29802 Visual Studio Elevation of Privilege Vulnerability
High 7.3
CVE-2025-29804 Visual Studio Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.2
CVE-2025-29793 Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 24%
High 7.1
CVE-2025-27491 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1.4%
High 7.1
CVE-2025-29809 Windows Kerberos Security Feature Bypass Vulnerability
EPSS 4.3%
High 7.0
CVE-2025-21191 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
High 7.0
CVE-2025-26640 Windows Digital Media Elevation of Privilege Vulnerability
High 7.0
CVE-2025-26649 Windows Secure Channel Elevation of Privilege Vulnerability
High 7.0
CVE-2025-26665 Windows upnphost.dll Elevation of Privilege Vulnerability
High 7.0
CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability
High 7.0
CVE-2025-27478 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
High 7.0
CVE-2025-27492 Windows Secure Channel Elevation of Privilege Vulnerability
High 7.0
CVE-2025-27732 Windows Graphics Component Elevation of Privilege Vulnerability

Medium22 Show

Medium 6.8
CVE-2025-25002 Azure Local Cluster Information Disclosure Vulnerability
EPSS 1.1%
Medium 6.8
CVE-2025-26637 Windows BitLocker Security Feature Bypass Vulnerability
Medium 6.7
CVE-2025-26681 Win32k Elevation of Privilege Vulnerability
Medium 6.5
CVE-2025-21197 Windows NTFS Information Disclosure Vulnerability
EPSS 3.3%
Medium 6.5
CVE-2025-21203 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.7%
Medium 6.5
CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2025-26651 Windows Local Session Manager (LSM) Denial of Service Vulnerability
EPSS 2.6%
Medium 6.5
CVE-2025-26664 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2025-26667 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2025-26672 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2025-26676 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.7%
Medium 6.5
CVE-2025-27474 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2025-27738 Windows Resilient File System (ReFS) Information Disclosure Vulnerability
EPSS 3.6%
Medium 6.2
CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability
EPSS 1.1%
Medium 6.0
CVE-2025-27735 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Medium 5.9
CVE-2025-27471 Microsoft Streaming Service Denial of Service Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2025-27736 Windows Power Dependency Coordinator Information Disclosure Vulnerability
Medium 5.5
CVE-2025-27742 NTFS Information Disclosure Vulnerability
Medium 5.5
CVE-2025-29808 Windows Cryptographic Services Information Disclosure Vulnerability
Medium 5.5
CVE-2025-29821 Microsoft Dynamics Business Central Information Disclosure Vulnerability
Medium 5.4
CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 5.1
CVE-2025-26644 Windows Hello Spoofing Vulnerability