Microsoft's security release of 8 April 2025
Patch Tuesday, April 2025, page 2
As of , CISA lists one of the 119 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2025-29824, Windows Common Log File System Driver Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2025-26635Windows Hello Security Feature Bypass | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 102 | CVE-2025-29819Windows Admin Center in Azure Portal Information Disclosure | None | Not on CISA's list | 6.2 Medium | 0.01 |
| 103 | CVE-2025-27471Microsoft Streaming Service Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 104 | CVE-2025-27736Windows Power Dependency Coordinator Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 105 | CVE-2025-27742NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 106 | CVE-2025-29808Windows Cryptographic Services Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 107 | CVE-2025-29821Microsoft Dynamics Business Central Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 108 | CVE-2025-26644Windows Hello Spoofing | None | Not on CISA's list | 5.1 Medium | 0.01 |
| 109 | CVE-2025-26648Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 110 | CVE-2025-29816Microsoft Word Security Feature Bypass | None | Not on CISA's list | 7.5 High | 0.00 |
| 111 | CVE-2025-21191Windows Local Security Authority (LSA) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 112 | CVE-2025-26640Windows Digital Media Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 113 | CVE-2025-26649Windows Secure Channel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 114 | CVE-2025-26665Windows upnphost.dll Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 115 | CVE-2025-27475Windows Update Stack Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 116 | CVE-2025-27478Windows Local Security Authority (LSA) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 117 | CVE-2025-27492Windows Secure Channel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 118 | CVE-2025-27732Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 119 | CVE-2025-27735Windows Virtualization-Based Security (VBS) Security Feature Bypass | None | Not on CISA's list | 6.0 Medium | 0.00 |