Skip to the content
The Update Bureau
Security

KB5055528: all 68 vulnerabilities

Cumulative update for Windows 11, version 23H2, April 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

68 vulnerabilities fixed
1 exploited 5 critical 63 important
VulnerabilitySeverityCVSS
CVE-2025-29824 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass
Critical 8.3
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Critical 8.1
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Critical 8.1
Windows TCP/IP Remote Code Execution Vulnerability
Critical 7.5
Windows Hyper-V Remote Code Execution Vulnerability
Critical 7.1
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Redhat: CVE-2022-2601 grub2 - Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass
Important 8.6
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Important 8.6
Windows Defender Application Control Security Feature Bypass Vulnerability
Important 8.4
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.0
Windows Process Activation Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows USB Print Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Media Remote Code Execution Vulnerability
Important 7.8
Windows Media Remote Code Execution Vulnerability
Important 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Important 7.8
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
Important 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Important 7.8
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Windows Shell Remote Code Execution Vulnerability
Important 7.8
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.8
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Important 7.8
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Important 7.8
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Important 7.5
Win32k Elevation of Privilege Vulnerability
Important 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Important 7.5
HTTP.sys Denial of Service Vulnerability
Important 7.5
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Important 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability
Important 7.5
Windows Kerberos Security Feature Bypass Vulnerability
Important 7.1
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Important 7.0
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.0
Windows Secure Channel Elevation of Privilege Vulnerability
Important 7.0
Windows upnphost.dll Elevation of Privilege Vulnerability
Important 7.0
Windows Update Stack Elevation of Privilege Vulnerability
Important 7.0
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Important 7.0
Windows Secure Channel Elevation of Privilege Vulnerability
Important 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.0
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Important 6.7
Win32k Elevation of Privilege Vulnerability
Important 6.7
Windows NTFS Information Disclosure Vulnerability
Important 6.5
Windows Hello Security Feature Bypass Vulnerability
Important 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Important 6.5
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Important 6.0
Microsoft Streaming Service Denial of Service Vulnerability
Important 5.9
Windows Power Dependency Coordinator Information Disclosure Vulnerability
Important 5.5
NTFS Information Disclosure Vulnerability
Important 5.5
Windows Hello Spoofing Vulnerability
Important 5.1