Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528
Patch Tuesday
Patch Tuesday April 2025 – known issues, zero-days and what to do
On 8 Apr 2025 Microsoft fixed 132 vulnerabilities – critical: 17, already exploited (zero-days): 1. Known issues with the updates: none known.
132vulnerabilities
17critical
1zero-days
0known issues
What to do now
- Zero-day first: one vulnerability is already being exploited (CVE-2025-29824) – install the update as soon as possible, starting with servers and exposed systems.
- 17 critical vulnerabilities (mainly Windows, Microsoft Office, Azure) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
Critical vulnerabilities (17)
Azure ML Compute Elevation of Privilege Vulnerability
Azure
Azure AI Bot Elevation of Privilege Vulnerability
Azure
Azure Bot Framework SDK Elevation of Privilege Vulnerability
Azure
Azure Virtual Desktop Elevation of Privilege Vulnerability
Azure
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528
Show 11 more critical vulnerabilities
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055523 KB5055527
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows · KB5055519 KB5055526 KB5055523 KB5055527
Microsoft Dynamics Information Disclosure Vulnerability
Microsoft Dynamics
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002700 KB5002623
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002700 KB5002623
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office · KB5002700 KB5002623
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office · KB5002700 KB5002623
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office · KB5002700 KB5002623
Windows TCP/IP Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528
Azure Functions Remote Code Execution Vulnerability
Azure
Windows Hyper-V Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5055519 KB5055526 KB5055518 KB5055528
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5055523 | Windows | 82 | none known |
| KB5055526 | Windows | 76 | none known |
| KB5055527 | Windows | 73 | none known |
| KB5055519 | Windows | 72 | none known |
| KB5055528 | Windows | 65 | none known |
| KB5055518 | Windows | 59 | none known |
| KB5055521 | Windows | 21 | none known |
| KB5055609 | Windows | 9 | none known |
| KB5055557 | Windows | 8 | none known |
| KB5002700 | Microsoft Office | 7 | none known |
| KB5002623 | Microsoft Office | 7 | none known |
| KB5055547 | Windows | 5 | none known |
Show 21 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5002692 | Microsoft Office | 4 | none known |
| KB5002691 | Microsoft Office | 4 | none known |
| KB5055581 | Windows | 3 | none known |
| KB5055561 | Windows | 3 | none known |
| KB5002699 | Microsoft Office | 3 | none known |
| KB5002702 | Microsoft Office | 3 | none known |
| KB5002704 | Microsoft Office | 3 | none known |
| KB5055596 | Windows | 2 | none known |
| KB5002680 | Microsoft Office | 2 | none known |
| KB5002682 | Microsoft Office | 2 | none known |
| KB5002705 | Microsoft Office | 2 | none known |
| KB5002669 | Microsoft Office | 1 | none known |
| KB4484432 | Microsoft Office | 1 | none known |
| KB5002622 | Microsoft Office | 1 | none known |
| KB5002588 | Microsoft Office | 1 | none known |
| KB5002703 | Microsoft Office | 1 | none known |
| KB5002701 | Microsoft Office | 1 | none known |
| KB5002573 | Microsoft Office | 1 | none known |
| KB5056717 | Microsoft Dynamics | 1 | none known |
| KB5056716 | Microsoft Dynamics | 1 | none known |
| KB5056718 | Microsoft Dynamics | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.