cve.bz

Microsoft Patch Tuesday, April 2025: the CVEs

Filter

Microsoft Patch Tuesday April 2025: the CVEs Microsoft published on 8 April 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2025-29824KEVEPSS 19%

    Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2025-29823EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  3. 7.8CVE-2025-29822EPSS 0.8%

    Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.

  4. 5.5CVE-2025-29821EPSS 0.7%

    Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.

  5. 7.8CVE-2025-29820EPSS 0.8%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  6. 6.2CVE-2025-29819EPSS 1.1%

    External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.

  7. 7.5CVE-2025-29816EPSS 0.5%

    Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

  8. 7.8CVE-2025-29812EPSS 0.9%

    Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2025-29811EPSS 0.6%

    Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

  10. 7.5CVE-2025-29810EPSS 2.6%

    Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

  11. 7.1CVE-2025-29809EPSS 4.3%

    Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

  12. 5.5CVE-2025-29808EPSS 0.5%

    Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

  13. 7.5CVE-2025-29805EPSS 1.6%

    Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.

  14. 7.3CVE-2025-29804EPSS 1.3%

    Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

  15. 7.3CVE-2025-29802EPSS 1.0%

    Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2025-29801EPSS 1.1%

    Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.

  17. 7.8CVE-2025-29800EPSS 1.1%

    Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.

  18. 8.8CVE-2025-29794EPSS 4.9%

    Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  19. 7.2CVE-2025-29793EPSS 24%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  20. 7.3CVE-2025-29792EPSS 1.2%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2025-29791EPSS 1.1%

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  22. 7.8CVE-2025-27752EPSS 1.1%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  23. 7.8CVE-2025-27751ExploitEPSS 2.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  24. 7.8CVE-2025-27750EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  25. 7.8CVE-2025-27749EPSS 1.1%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  26. 7.8CVE-2025-27748EPSS 1.1%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  27. 7.8CVE-2025-27747EPSS 0.8%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  28. 7.8CVE-2025-27746EPSS 0.9%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2025-27745EPSS 1.1%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2025-27744EPSS 1.2%

    Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2025-27743EPSS 0.9%

    Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

  32. 5.5CVE-2025-27742EPSS 0.9%

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.

  33. 7.8CVE-2025-27741EPSS 0.8%

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

  34. 8.8CVE-2025-27740EPSS 3.5%

    Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

  35. 7.8CVE-2025-27739EPSS 0.6%

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

  36. 6.5CVE-2025-27738EPSS 3.6%

    Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.

  37. 8.6CVE-2025-27737EPSS 0.8%

    Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.

  38. 5.5CVE-2025-27736EPSS 0.9%

    Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally.

  39. 6.0CVE-2025-27735EPSS 0.4%

    Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

  40. 7.8CVE-2025-27733EPSS 0.7%

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

  41. 7.0CVE-2025-27732EPSS 0.3%

    Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2025-27731EPSS 0.6%

    Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2025-27730EPSS 0.6%

    Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

  44. 7.8CVE-2025-27729EPSS 0.8%

    Use after free in Windows Shell allows an unauthorized attacker to execute code locally.

  45. 7.8CVE-2025-27728EPSS 0.6%

    Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2025-27727EPSS 1.0%

    Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

  47. 7.0CVE-2025-27492EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

  48. 7.1CVE-2025-27491EPSS 1.4%

    Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

  49. 7.8CVE-2025-27490EPSS 0.6%

    Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2025-27489EPSS 0.6%

    Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally.

  51. 8.0CVE-2025-27487EPSS 1.5%

    Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

  52. 7.5CVE-2025-27486EPSS 2.2%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  53. 7.5CVE-2025-27485EPSS 2.2%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  54. 7.5CVE-2025-27484EPSS 0.8%

    Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.

  55. 7.8CVE-2025-27483EPSS 0.8%

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

  56. 8.1CVE-2025-27482EPSS 1.6%

    Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  57. 8.8CVE-2025-27481EPSS 1.3%

    Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  58. 8.1CVE-2025-27480EPSS 13%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  59. 7.5CVE-2025-27479EPSS 2.3%

    Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

  60. 7.0CVE-2025-27478EPSS 0.5%

    Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

  61. 8.8CVE-2025-27477EPSS 1.6%

    Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  62. 7.8CVE-2025-27476EPSS 0.6%

    Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

  63. 7.0CVE-2025-27475EPSS 0.4%

    Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.

  64. 6.5CVE-2025-27474EPSS 1.9%

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  65. 7.5CVE-2025-27473EPSS 2.3%

    Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

  66. 5.4CVE-2025-27472EPSS 1.5%

    Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.

  67. 5.9CVE-2025-27471EPSS 1.3%

    Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.

  68. 7.5CVE-2025-27470EPSS 2.4%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  69. 7.5CVE-2025-27469EPSS 2.6%

    Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

  70. 7.8CVE-2025-27467EPSS 0.6%

    Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

  71. 7.8CVE-2025-26688EPSS 0.6%

    Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.

  72. 7.5CVE-2025-26687EPSS 1.2%

    Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

  73. 7.5CVE-2025-26686EPSS 1.4%

    Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

  74. 7.5CVE-2025-26682EPSS 1.7%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  75. 6.7CVE-2025-26681EPSS 0.6%

    Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  76. 7.5CVE-2025-26680EPSS 2.0%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  77. 7.8CVE-2025-26679EPSS 0.6%

    Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.

  78. 8.4CVE-2025-26678EPSS 0.5%

    Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.

  79. 6.5CVE-2025-26676EPSS 1.7%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  80. 7.8CVE-2025-26675EPSS 0.6%

    Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  81. 7.8CVE-2025-26674EPSS 0.6%

    Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

  82. 7.5CVE-2025-26673EPSS 2.7%

    Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

  83. 6.5CVE-2025-26672EPSS 1.9%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  84. 8.1CVE-2025-26671EPSS 1.2%

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  85. 8.1CVE-2025-26670EPSS 11%

    Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

  86. 8.8CVE-2025-26669EPSS 1.5%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  87. 7.5CVE-2025-26668EPSS 1.3%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  88. 6.5CVE-2025-26667EPSS 1.9%

    Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  89. 7.8CVE-2025-26666EPSS 0.6%

    Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

  90. 7.0CVE-2025-26665EPSS 0.3%

    Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.

  91. 6.5CVE-2025-26664EPSS 1.9%

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  92. 8.1CVE-2025-26663EPSS 1.8%

    Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

  93. 7.5CVE-2025-26652EPSS 2.4%

    Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

  94. 6.5CVE-2025-26651EPSS 2.6%

    Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

  95. 7.0CVE-2025-26649EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

  96. 7.8CVE-2025-26648EPSS 0.5%

    Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

  97. 8.8CVE-2025-26647EPSS 2.3%

    Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

  98. 5.1CVE-2025-26644EPSS 0.6%

    Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.

  99. 7.8CVE-2025-26642EPSS 0.8%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

  100. 7.5CVE-2025-26641EPSS 2.3%

    Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.