CVEs published in April 2025
121 tracked CVEs from 8 vendors had their first vendor advisory published in April 2025: 87 high, 2 in CISA KEV. Newest first.
33 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-26680High
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26681Medium
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26668High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26667Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26669High
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26666High
Windows Media Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26665High
Windows upnphost.dll Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26664Medium
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2025-26663High
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2025-27085Medium
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor
Aruba · 1 advisory - Added
CVE-2025-27084Medium
vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could
Aruba · 1 advisory - Added
CVE-2025-27083High
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based…
Aruba · 1 advisory - Added
CVE-2025-27082High
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8…
Aruba · 1 advisory - Added
CVE-2025-27079Medium
vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could
Aruba · 1 advisory - Added
CVE-2025-27078Medium
vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could
Aruba · 1 advisory - Added
storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all…
Fortinet · 1 advisory - Added
CVE-2025-30204High
golang-jwt/jwt Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-1153Medium
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-50602High
Libexpat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-22457HighCISA KEV
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ivanti · 1 advisory - Added
CVE-2025-25041Medium
vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could
Aruba · 1 advisory