CVEs published in April 2025
121 tracked CVEs from 8 vendors had their first vendor advisory published in April 2025: 87 high, 2 in CISA KEV. Newest first.
33 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-52888Medium
For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties
Check Point · 1 advisory - Added
Authenticated end-user may set a specially crafted SNX bookmark
Check Point · 1 advisory - Added
CVE-2025-1181Medium
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-9287High
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-3447Medium
QEMU Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-25234High
UAG: Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability.
Omnissa · 1 advisory - Added
CVE-2025-25230High
Horizon Client: Omnissa Horizon Client for Windows contains an LPE Vulnerability.
Omnissa · 1 advisory - Added
CVE-2025-29803High
Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2024-13861High
code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10
Sophos · 1 advisory - Added
CVE-2025-22869High
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-1178Medium
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-1176Medium
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-0450Medium
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2021-47001Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-24062High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-24060High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29811High
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29812High
DirectX Graphics Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29810High
Active Directory Domain Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29808Medium
Windows Cryptographic Services Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29809High
Windows Kerberos Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27739High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27738Medium
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27737High
Windows Security Zone Mapping Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27736Medium
Windows Power Dependency Coordinator Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27735Medium
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27733High
NTFS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27732High
Windows Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27730High
Windows Digital Media Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27731High
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27728High
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27729High
Windows Shell Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27727High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27490High
Windows Bluetooth Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27491High
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27492High
Windows Secure Channel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27486High
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27489High
Azure Local Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27487High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27483High
NTFS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27482High
Windows Remote Desktop Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27481High
Windows Telephony Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27480High
Windows Remote Desktop Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27484High
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27485High
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27469High
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26679High
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26678High
Windows Defender Application Control Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26676Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26675High
Windows Subsystem for Linux Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26673High
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26672Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26674High
Windows Media Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26671High
Windows Remote Desktop Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26670High
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26652High
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26651Medium
Windows Local Session Manager (LSM) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26647High
Windows Kerberos Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26649High
Windows Secure Channel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26648High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26644Medium
Windows Hello Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26641High
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26640High
Windows Digital Media Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26642High
Microsoft Office Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26637Medium
Windows BitLocker Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26635Medium
Windows Hello Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26639High
Windows USB Print Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-24058High
Windows DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21222High
Windows Telephony Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21221High
Windows Telephony Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21204High
Windows Process Activation Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21203Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21205High
Windows Telephony Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21191High
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21197Medium
Windows NTFS Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-21174High
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-24073High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-24074High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29824HighCISA KEV
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29820High
Microsoft Word Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29794High
Microsoft SharePoint Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-29793High
Microsoft SharePoint Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27743High
Microsoft System Center Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27747High
Microsoft Word Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27746High
Microsoft Office Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27742Medium
NTFS Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27741High
NTFS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27740High
Active Directory Certificate Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27479High
Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27478High
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27477High
Windows Telephony Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27476High
Windows Digital Media Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27474Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27472Medium
Windows Mark of the Web Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27473High
HTTP.sys Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27470High
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27471Medium
Microsoft Streaming Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26688High
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26687High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26686High
Windows TCP/IP Remote Code Execution Vulnerability
MS Server · 1 advisory