# KB5055521: April 2025 cumulative update for Windows 10 1607 KB5055521, released April 8, 2025, fixes 61 CVEs across 4 products. One of them is being exploited (CVE-2025-29824); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5055521 - Platform: Microsoft - Released: Apr 8, 2025 - Priority: Patch now (Closes CVE-2025-29824, exploited (CISA KEV, ransomware)) - CVEs: 61, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5055521 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-32-bit-systems.md) | | 14393.7969 | | [Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-x64-based-systems.md) | | 14393.7969 | | [Windows Server 2016](https://patchblox.com/security/data/product/microsoft/windows-server-2016.md) | | 14393.7969 | | [Windows Server 2016 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2016-server-core-installation.md) | | 14393.7969 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-29824](https://patchblox.com/security/data/cve/CVE-2025-29824.md) | Patch now | Windows Common Log File System Driver | 7.8 | 0.1925 | CISA KEV, Ransomware | | [CVE-2025-27480](https://patchblox.com/security/data/cve/CVE-2025-27480.md) | Urgent | Remote Desktop Gateway Service | 8.1 | 0.1262 | More likely | | [CVE-2025-26670](https://patchblox.com/security/data/cve/CVE-2025-26670.md) | Urgent | Windows LDAP - Lightweight Directory Access Protocol | 8.1 | 0.1105 | More likely | | [CVE-2025-29809](https://patchblox.com/security/data/cve/CVE-2025-29809.md) | Urgent | Windows Kerberos | 7.1 | 0.0426 | More likely | | [CVE-2025-26663](https://patchblox.com/security/data/cve/CVE-2025-26663.md) | Urgent | Windows LDAP - Lightweight Directory Access Protocol | 8.1 | 0.0179 | More likely | | [CVE-2025-27482](https://patchblox.com/security/data/cve/CVE-2025-27482.md) | Urgent | Remote Desktop Gateway Service | 8.1 | 0.0165 | More likely | | [CVE-2025-27491](https://patchblox.com/security/data/cve/CVE-2025-27491.md) | Urgent | Windows Hyper-V | 7.1 | 0.0143 | | | [CVE-2025-26686](https://patchblox.com/security/data/cve/CVE-2025-26686.md) | Urgent | Windows TCP/IP | 7.5 | 0.0142 | | | [CVE-2025-27727](https://patchblox.com/security/data/cve/CVE-2025-27727.md) | Urgent | Windows Installer | 7.8 | 0.0104 | More likely | | [CVE-2025-21204](https://patchblox.com/security/data/cve/CVE-2025-21204.md) | High | Windows Update Stack | 7.8 | 0.0713 | | | [CVE-2025-27740](https://patchblox.com/security/data/cve/CVE-2025-27740.md) | High | Windows Active Directory Certificate Services | 8.8 | 0.0352 | | | [CVE-2025-26673](https://patchblox.com/security/data/cve/CVE-2025-26673.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0273 | | | [CVE-2025-29810](https://patchblox.com/security/data/cve/CVE-2025-29810.md) | High | Active Directory Domain Services | 7.5 | 0.0262 | | | [CVE-2025-27469](https://patchblox.com/security/data/cve/CVE-2025-27469.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0257 | | | [CVE-2025-26652](https://patchblox.com/security/data/cve/CVE-2025-26652.md) | High | Windows Standards-Based Storage Management Service | 7.5 | 0.0235 | | | [CVE-2025-27470](https://patchblox.com/security/data/cve/CVE-2025-27470.md) | High | Windows Standards-Based Storage Management Service | 7.5 | 0.0235 | | | [CVE-2025-26647](https://patchblox.com/security/data/cve/CVE-2025-26647.md) | High | Windows Kerberos | 8.8 | 0.0230 | | | [CVE-2025-26641](https://patchblox.com/security/data/cve/CVE-2025-26641.md) | High | Windows Cryptographic Services | 7.5 | 0.0227 | | | [CVE-2025-27473](https://patchblox.com/security/data/cve/CVE-2025-27473.md) | High | Windows HTTP.sys | 7.5 | 0.0227 | | | [CVE-2025-27479](https://patchblox.com/security/data/cve/CVE-2025-27479.md) | High | Windows Kerberos | 7.5 | 0.0227 | | | [CVE-2025-21174](https://patchblox.com/security/data/cve/CVE-2025-21174.md) | High | Windows Standards-Based Storage Management Service | 7.5 | 0.0218 | | | [CVE-2025-27485](https://patchblox.com/security/data/cve/CVE-2025-27485.md) | High | Windows Standards-Based Storage Management Service | 7.5 | 0.0216 | | | [CVE-2025-27486](https://patchblox.com/security/data/cve/CVE-2025-27486.md) | High | Windows Standards-Based Storage Management Service | 7.5 | 0.0216 | | | [CVE-2025-26680](https://patchblox.com/security/data/cve/CVE-2025-26680.md) | High | Windows Standards-Based Storage Management Service | 7.5 | 0.0204 | | | [CVE-2025-27477](https://patchblox.com/security/data/cve/CVE-2025-27477.md) | High | Windows Telephony Service | 8.8 | 0.0161 | | | [CVE-2025-26669](https://patchblox.com/security/data/cve/CVE-2025-26669.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0153 | | | [CVE-2025-27487](https://patchblox.com/security/data/cve/CVE-2025-27487.md) | High | Remote Desktop Client | 8.0 | 0.0152 | | | [CVE-2025-21205](https://patchblox.com/security/data/cve/CVE-2025-21205.md) | High | Windows Telephony Service | 8.8 | 0.0139 | | | [CVE-2025-21221](https://patchblox.com/security/data/cve/CVE-2025-21221.md) | High | Windows Telephony Service | 8.8 | 0.0139 | | | [CVE-2025-21222](https://patchblox.com/security/data/cve/CVE-2025-21222.md) | High | Windows Telephony Service | 8.8 | 0.0139 | | | [CVE-2025-27481](https://patchblox.com/security/data/cve/CVE-2025-27481.md) | High | Windows Telephony Service | 8.8 | 0.0127 | | | [CVE-2025-26668](https://patchblox.com/security/data/cve/CVE-2025-26668.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0126 | | | [CVE-2025-26671](https://patchblox.com/security/data/cve/CVE-2025-26671.md) | High | Windows Remote Desktop Services | 8.1 | 0.0120 | | | [CVE-2025-26687](https://patchblox.com/security/data/cve/CVE-2025-26687.md) | High | Windows Win32K - GRFX | 7.5 | 0.0116 | | | [CVE-2025-27484](https://patchblox.com/security/data/cve/CVE-2025-27484.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.5 | 0.0083 | | | [CVE-2025-27741](https://patchblox.com/security/data/cve/CVE-2025-27741.md) | High | Windows NTFS | 7.8 | 0.0082 | | | [CVE-2025-27737](https://patchblox.com/security/data/cve/CVE-2025-27737.md) | High | Windows Security Zone Mapping | 8.6 | 0.0078 | | | [CVE-2025-27483](https://patchblox.com/security/data/cve/CVE-2025-27483.md) | High | Windows NTFS | 7.8 | 0.0077 | | | [CVE-2025-27733](https://patchblox.com/security/data/cve/CVE-2025-27733.md) | High | Windows NTFS | 7.8 | 0.0074 | | | [CVE-2025-24073](https://patchblox.com/security/data/cve/CVE-2025-24073.md) | High | Windows DWM Core Library | 7.8 | 0.0061 | | | [CVE-2025-26679](https://patchblox.com/security/data/cve/CVE-2025-26679.md) | High | RPC Endpoint Mapper Service | 7.8 | 0.0059 | | | [CVE-2025-26688](https://patchblox.com/security/data/cve/CVE-2025-26688.md) | High | Microsoft Virtual Hard Drive | 7.8 | 0.0058 | | | [CVE-2025-26648](https://patchblox.com/security/data/cve/CVE-2025-26648.md) | High | Windows Kernel | 7.8 | 0.0048 | | | [CVE-2025-27478](https://patchblox.com/security/data/cve/CVE-2025-27478.md) | High | Windows Local Security Authority (LSA) | 7.0 | 0.0046 | | | [CVE-2025-27732](https://patchblox.com/security/data/cve/CVE-2025-27732.md) | High | Windows Win32K - GRFX | 7.0 | 0.0035 | | | [CVE-2025-26665](https://patchblox.com/security/data/cve/CVE-2025-26665.md) | High | Windows upnphost.dll | 7.0 | 0.0034 | | | [CVE-2025-21191](https://patchblox.com/security/data/cve/CVE-2025-21191.md) | High | Windows Local Security Authority (LSA) | 7.0 | 0.0032 | | | [CVE-2025-27738](https://patchblox.com/security/data/cve/CVE-2025-27738.md) | Routine | Windows Resilient File System (ReFS) | 6.5 | 0.0357 | | | [CVE-2025-21197](https://patchblox.com/security/data/cve/CVE-2025-21197.md) | Routine | Windows NTFS | 6.5 | 0.0332 | | | [CVE-2025-26664](https://patchblox.com/security/data/cve/CVE-2025-26664.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0185 | | | [CVE-2025-26667](https://patchblox.com/security/data/cve/CVE-2025-26667.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0185 | | | [CVE-2025-26672](https://patchblox.com/security/data/cve/CVE-2025-26672.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0185 | | | [CVE-2025-27474](https://patchblox.com/security/data/cve/CVE-2025-27474.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0185 | | | [CVE-2025-21203](https://patchblox.com/security/data/cve/CVE-2025-21203.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0169 | | | [CVE-2025-26676](https://patchblox.com/security/data/cve/CVE-2025-26676.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0166 | | | [CVE-2024-21302](https://patchblox.com/security/data/cve/CVE-2024-21302.md) | Routine | Windows Secure Kernel Mode | 6.7 | 0.0157 | Disclosed | | [CVE-2025-27471](https://patchblox.com/security/data/cve/CVE-2025-27471.md) | Routine | Microsoft Streaming Service | 5.9 | 0.0132 | | | [CVE-2025-27736](https://patchblox.com/security/data/cve/CVE-2025-27736.md) | Routine | Windows Power Dependency Coordinator | 5.5 | 0.0094 | | | [CVE-2025-27742](https://patchblox.com/security/data/cve/CVE-2025-27742.md) | Routine | Windows NTFS | 5.5 | 0.0088 | | | [CVE-2025-26637](https://patchblox.com/security/data/cve/CVE-2025-26637.md) | Routine | Windows BitLocker | 6.8 | 0.0086 | | | [CVE-2025-27735](https://patchblox.com/security/data/cve/CVE-2025-27735.md) | Routine | Windows Virtualization-Based Security (VBS) Enclave | 6.0 | 0.0041 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo