Patch Tuesday, April 2025 Edition

Summary: Microsoft released updates addressing at least 121 security holes in Windows and its software, including 11 rated critical and one zero-day, CVE-2025-29824, a local elevation of privilege flaw in the Windows Common Log File System driver. Tenable's Satnam Narang noted Microsoft has patched 32 CLFS vulnerabilities since 2022, six of them exploited in the wild, and Rapid7's Adam Barnett flagged the critical LDAP flaw CVE-2025-26663 as a priority for defenders.
Key Takeaway: Elevation of privilege flaws have led zero-day exploitation for two years and account for over half of all zero-days exploited so far in 2025, so the 'important' rating on CVE-2025-29824 understates what defenders are actually facing.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-26663 CVE-2025-26671 CVE-2025-27480 CVE-2025-27482 CVE-2025-29824
Related: Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities Cyber Risks ·
CVE-2025-29824: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Known Exploited Vulnerabilities · Apr 08, 2025
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026