Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
CVE tracker
Microsoft Patch Tuesday
What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.
All CVEs – Patch Tuesday April 2025
132 vulnerabilities
Azure ML Compute Elevation of Privilege Vulnerability
Azure · MSRC
Azure AI Bot Elevation of Privilege Vulnerability
Azure · MSRC
Azure Bot Framework SDK Elevation of Privilege Vulnerability
Azure · MSRC
Azure Virtual Desktop Elevation of Privilege Vulnerability
Azure · MSRC
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055523 KB5055527 · MSRC
Windows Remote Desktop Services Remote Code Execution Vulnerability
Microsoft Dynamics Information Disclosure Vulnerability
Microsoft Dynamics · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Azure Functions Remote Code Execution Vulnerability
Azure · MSRC
Windows Hyper-V Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Telephony Service Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Telephony Service Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Telephony Service Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Browser (Edge) · MSRC
Windows Kerberos Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055523 KB5055527 · MSRC
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Telephony Service Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Telephony Service Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Active Directory Certificate Services Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055523 KB5055527 · MSRC
Microsoft SharePoint Remote Code Execution Vulnerability
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Defender Application Control Security Feature Bypass Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055523 KB5055527 · MSRC
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Process Activation Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055523 KB5055519 KB5055526 KB5055518 · MSRC
Windows DWM Core Library Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055526 KB5055518 KB5055528 KB5055523 · MSRC
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows USB Print Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055526 KB5055518 KB5055528 KB5055523 · MSRC
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002699 KB5002691 KB5002704 KB5002588 · MSRC
Windows Kernel Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Media Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Media Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055526 KB5055518 KB5055528 KB5055523 · MSRC
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528 · MSRC
Windows Digital Media Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055518 KB5055528 KB5055523 · MSRC
NTFS Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055547 KB5055521 KB5055557 · MSRC
Azure Local Elevation of Privilege Vulnerability
Windows Bluetooth Service Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055526 KB5055518 KB5055528 KB5055523 · MSRC
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.