Microsoft Server security updates, April 2025 (Patch Tuesday 2025-04-08)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in April 2025, including the Patch Tuesday release on 2025-04-08 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 78
Critical: 0
High: 62
In CISA KEV: 1
CVEs: 78

Microsoft server CVEs, April 2025

Apr 12, 2025
High [CVE-2025-29803] Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
High7.3
Apr 8, 2025
High [CVE-2025-24062] Microsoft DWM Core Library Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-24060] Microsoft DWM Core Library Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-29811] Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-29812] DirectX Graphics Kernel Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-29810] Active Directory Domain Services Elevation of Privilege Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-29809] Windows Kerberos Security Feature Bypass Vulnerability
High7.1
Apr 8, 2025
High [CVE-2025-27739] Windows Kernel Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27737] Windows Security Zone Mapping Security Feature Bypass Vulnerability
High8.6
Apr 8, 2025
High [CVE-2025-27733] NTFS Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27732] Windows Graphics Component Elevation of Privilege Vulnerability
High7.0
Apr 8, 2025
High [CVE-2025-27730] Windows Digital Media Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27731] Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27728] Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27729] Windows Shell Remote Code Execution Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27727] Windows Installer Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27490] Windows Bluetooth Service Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27491] Windows Hyper-V Remote Code Execution Vulnerability
High7.1
Apr 8, 2025
High [CVE-2025-27492] Windows Secure Channel Elevation of Privilege Vulnerability
High7.0
Apr 8, 2025
High [CVE-2025-27486] Windows Standards-Based Storage Management Service Denial of Service Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-27489] Azure Local Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27487] Remote Desktop Client Remote Code Execution Vulnerability
High8.0
Apr 8, 2025
High [CVE-2025-27483] NTFS Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27482] Windows Remote Desktop Services Remote Code Execution Vulnerability
High8.1
Apr 8, 2025
High [CVE-2025-27481] Windows Telephony Service Remote Code Execution Vulnerability
High8.8
Apr 8, 2025
High [CVE-2025-27480] Windows Remote Desktop Services Remote Code Execution Vulnerability
High8.1
Apr 8, 2025
High [CVE-2025-27484] Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-27469] Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-26679] RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-26678] Windows Defender Application Control Security Feature Bypass Vulnerability
High8.4
Apr 8, 2025
High [CVE-2025-26675] Windows Subsystem for Linux Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-26674] Windows Media Remote Code Execution Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-26671] Windows Remote Desktop Services Remote Code Execution Vulnerability
High8.1
Apr 8, 2025
High [CVE-2025-26670] Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
High8.1
Apr 8, 2025
High [CVE-2025-26647] Windows Kerberos Elevation of Privilege Vulnerability
High8.8
Apr 8, 2025
High [CVE-2025-26648] Windows Kernel Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-26641] Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-26642] Microsoft Office Remote Code Execution Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-26639] Windows USB Print Driver Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-24058] Windows DWM Core Library Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-21222] Windows Telephony Service Remote Code Execution Vulnerability
High8.8
Apr 8, 2025
High [CVE-2025-21204] Windows Process Activation Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-21191] Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
High7.0
Apr 8, 2025
High [CVE-2025-24073] Microsoft DWM Core Library Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-29824] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
Apr 8, 2025
High [CVE-2025-29820] Microsoft Word Remote Code Execution Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-29794] Microsoft SharePoint Remote Code Execution Vulnerability
High8.8
Apr 8, 2025
High [CVE-2025-29793] Microsoft SharePoint Remote Code Execution Vulnerability
High7.2
Apr 8, 2025
High [CVE-2025-27743] Microsoft System Center Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27747] Microsoft Word Remote Code Execution Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27746] Microsoft Office Remote Code Execution Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-27740] Active Directory Certificate Services Elevation of Privilege Vulnerability
High8.8
Apr 8, 2025
High [CVE-2025-27479] Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-27478] Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
High7.0
Apr 8, 2025
High [CVE-2025-27473] HTTP.sys Denial of Service Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-26688] Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
High7.8
Apr 8, 2025
High [CVE-2025-26687] Win32k Elevation of Privilege Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-26686] Windows TCP/IP Remote Code Execution Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-26668] Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High7.5
Apr 8, 2025
High [CVE-2025-26669] Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
High8.8
Apr 8, 2025
High [CVE-2025-26665] Windows upnphost.dll Elevation of Privilege Vulnerability
High7.0
Apr 8, 2025
High [CVE-2025-26663] Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
High8.1
Apr 8, 2025
Medium [CVE-2025-29808] Windows Cryptographic Services Information Disclosure Vulnerability
Medium5.5
Apr 8, 2025
Medium [CVE-2025-27738] Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Medium6.5
Apr 8, 2025
Medium [CVE-2025-27736] Windows Power Dependency Coordinator Information Disclosure Vulnerability
Medium5.5
Apr 8, 2025
Medium [CVE-2025-27735] Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Medium6.0
Apr 8, 2025
Medium [CVE-2025-26676] Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Medium6.5
Apr 8, 2025
Medium [CVE-2025-26651] Windows Local Session Manager (LSM) Denial of Service Vulnerability
Medium6.5
Apr 8, 2025
Medium [CVE-2025-26644] Windows Hello Spoofing Vulnerability
Medium5.1
Apr 8, 2025
Medium [CVE-2025-26637] Windows BitLocker Security Feature Bypass Vulnerability
Medium6.8
Apr 8, 2025
Medium [CVE-2025-26635] Windows Hello Security Feature Bypass Vulnerability
Medium6.5
Apr 8, 2025
Medium [CVE-2025-21197] Windows NTFS Information Disclosure Vulnerability
Medium6.5
Apr 8, 2025
Medium [CVE-2025-27742] NTFS Information Disclosure Vulnerability
Medium5.5
Apr 8, 2025
Medium [CVE-2025-27474] Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Medium6.5
Apr 8, 2025
Medium [CVE-2025-27472] Windows Mark of the Web Security Feature Bypass Vulnerability
Medium5.4
Apr 8, 2025
Medium [CVE-2025-27471] Microsoft Streaming Service Denial of Service Vulnerability
Medium5.9
Apr 8, 2025
Medium [CVE-2025-26681] Win32k Elevation of Privilege Vulnerability
Medium6.7
Apr 8, 2025
Medium [CVE-2025-26667] Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Medium6.5

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.