Skip to the content
The Update Bureau
Security

KB5055523: all 81 vulnerabilities

Cumulative update for Windows Server, version 2025, April 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

81 vulnerabilities fixed
1 exploited 6 critical 75 important
VulnerabilitySeverityCVSS
CVE-2025-29824 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Critical 8.1
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Critical 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Critical 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Critical 8.1
Windows TCP/IP Remote Code Execution Vulnerability
Critical 7.5
Windows Hyper-V Remote Code Execution Vulnerability
Critical 7.1
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Kerberos Elevation of Privilege Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Active Directory Certificate Services Elevation of Privilege Vulnerability
Important 8.8
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Important 8.6
Windows Defender Application Control Security Feature Bypass Vulnerability
Important 8.4
Windows Remote Desktop Services Remote Code Execution Vulnerability
Important 8.1
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.0
Windows Process Activation Elevation of Privilege Vulnerability
Important 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Important 7.8
Windows USB Print Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Media Remote Code Execution Vulnerability
Important 7.8
Windows Media Remote Code Execution Vulnerability
Important 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Important 7.8
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
Important 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Important 7.8
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Shell Remote Code Execution Vulnerability
Important 7.8
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.8
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Important 7.8
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Win32k Elevation of Privilege Vulnerability
Important 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
HTTP.sys Denial of Service Vulnerability
Important 7.5
Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
Important 7.5
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability
Important 7.5
Windows Kerberos Security Feature Bypass Vulnerability
Important 7.1
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Important 7.0
Windows Digital Media Elevation of Privilege Vulnerability
Important 7.0
Windows Secure Channel Elevation of Privilege Vulnerability
Important 7.0
Windows upnphost.dll Elevation of Privilege Vulnerability
Important 7.0
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Important 7.0
Windows Secure Channel Elevation of Privilege Vulnerability
Important 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.0
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Win32k Elevation of Privilege Vulnerability
Important 6.7
Windows NTFS Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Important 6.5
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Important 6.0
Microsoft Streaming Service Denial of Service Vulnerability
Important 5.9
Windows Power Dependency Coordinator Information Disclosure Vulnerability
Important 5.5
NTFS Information Disclosure Vulnerability
Important 5.5
Windows Hello Spoofing Vulnerability
Important 5.1