Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-26670 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network | 8.1 group max | 11% | ||
| CVE-2025-27480 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network | 8.1 | 12% | ||
| CVE-2025-27482 | Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network | 8.1 | 2% | ||
| CVE-2025-27745 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | 7.8 group max | 1% | ||
CVE-2025-29794+1 related CVE | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network | 8.8 group max | 5% | ||
| CVE-2025-29812 | Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally | 7.8 | <1% | ||
| CVE-2025-29822 | Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally | 7.8 | <1% |
From the original article
4 min read at blog.talosintelligence.com
Microsoft has released its monthly security update for April of 2025 which includes 126 vulnerabilities affecting a range of products, including 11 that Microsoft marked as “critical”. In this month's release, none of the included vulnerabilities have been observed by Microsoft to be exploited in the wild.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.