Skip to the content
The Update Bureau
Security

KB5055521: all 62 vulnerabilities

Cumulative update for Windows Server, version 2016, April 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

62 vulnerabilities fixed
1 exploited 7 critical 55 important
VulnerabilitySeverityCVSS
CVE-2025-29824 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass
Critical 8.3
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Critical 8.1
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Critical 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Critical 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Critical 8.1
Windows TCP/IP Remote Code Execution Vulnerability
Critical 7.5
Windows Hyper-V Remote Code Execution Vulnerability
Critical 7.1
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Kerberos Elevation of Privilege Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Active Directory Certificate Services Elevation of Privilege Vulnerability
Important 8.8
Redhat: CVE-2022-2601 grub2 - Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass
Important 8.6
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Important 8.6
Windows Remote Desktop Services Remote Code Execution Vulnerability
Important 8.1
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.0
Windows Process Activation Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
Important 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Important 7.8
NTFS Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
NTFS Elevation of Privilege Vulnerability
Important 7.8
NTFS Elevation of Privilege Vulnerability
Important 7.8
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Win32k Elevation of Privilege Vulnerability
Important 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
HTTP.sys Denial of Service Vulnerability
Important 7.5
Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
Important 7.5
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability
Important 7.5
Windows Kerberos Security Feature Bypass Vulnerability
Important 7.1
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Important 7.0
Windows upnphost.dll Elevation of Privilege Vulnerability
Important 7.0
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Important 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.0
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows NTFS Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Important 6.5
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Important 6.0
Microsoft Streaming Service Denial of Service Vulnerability
Important 5.9
Windows Power Dependency Coordinator Information Disclosure Vulnerability
Important 5.5
NTFS Information Disclosure Vulnerability
Important 5.5