# Security updates released in April 2025 - Web page: https://patchblox.com/security/patch-radar/2025/04 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 36 | 109 | 14 | 14 | | macOS | 1 | 2 | 1 | 1 | | Linux | 2,235 | 833 | 256 | 256 | ## Patch Tuesday, April 8, 2025 115 CVEs, 10 Critical, 1 exploited, 0 publicly disclosed, in 34 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 89 | 1 | 1 | | Windows 11 | 68 | 1 | 1 | | Windows 10 | 65 | 1 | 1 | | Microsoft Office | 15 | 0 | 0 | | SharePoint Server | 6 | 0 | 0 | | Azure | 1 | 0 | 0 | | Dynamics 365 | 1 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5055523](https://patchblox.com/security/data/fix/microsoft/kb5055523.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | Apr 8, 2025 | Patch now | 84 | 1 | CVE-2025-29824 | | [KB5055526](https://patchblox.com/security/data/fix/microsoft/kb5055526.md) | Azure Stack HCI OS 22H2, Windows Server 2022, Windows Server 2022 (Server Core installation) | Apr 8, 2025 | Patch now | 78 | 1 | CVE-2025-29824 | | [KB5055519](https://patchblox.com/security/data/fix/microsoft/kb5055519.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Apr 8, 2025 | Patch now | 75 | 1 | CVE-2025-29824 | | [KB5055527](https://patchblox.com/security/data/fix/microsoft/kb5055527.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Apr 8, 2025 | Patch now | 75 | 1 | CVE-2025-29824 | | [KB5055528](https://patchblox.com/security/data/fix/microsoft/kb5055528.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more | Apr 8, 2025 | Patch now | 67 | 1 | CVE-2025-29824 | | [KB5055518](https://patchblox.com/security/data/fix/microsoft/kb5055518.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 5 more | Apr 8, 2025 | Patch now | 61 | 1 | CVE-2025-29824 | | [KB5055521](https://patchblox.com/security/data/fix/microsoft/kb5055521.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Apr 8, 2025 | Patch now | 61 | 1 | CVE-2025-29824 | | [KB5055557](https://patchblox.com/security/data/fix/microsoft/kb5055557.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Apr 8, 2025 | Patch now | 54 | 1 | CVE-2025-29824 | | [KB5055581](https://patchblox.com/security/data/fix/microsoft/kb5055581.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Apr 8, 2025 | Patch now | 47 | 1 | CVE-2025-29824 | | [KB5055547](https://patchblox.com/security/data/fix/microsoft/kb5055547.md) | Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems | Apr 9, 2025 | Patch now | 44 | 1 | CVE-2025-29824 | | [KB5055561](https://patchblox.com/security/data/fix/microsoft/kb5055561.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Apr 8, 2025 | Patch now | 42 | 1 | CVE-2025-29824 | | [KB5055570](https://patchblox.com/security/data/fix/microsoft/kb5055570.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Apr 8, 2025 | Patch now | 42 | 1 | CVE-2025-29824 | | [KB5055596](https://patchblox.com/security/data/fix/microsoft/kb5055596.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Apr 8, 2025 | Patch now | 39 | 1 | CVE-2025-29824 | | [KB5055609](https://patchblox.com/security/data/fix/microsoft/kb5055609.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Apr 8, 2025 | Patch now | 39 | 1 | CVE-2025-29824 | | [KB5002691](https://patchblox.com/security/data/fix/microsoft/kb5002691.md) | Microsoft SharePoint Server 2019 | Apr 8, 2025 | Urgent | 4 | 0 | CVE-2025-29793 | | [KB5002692](https://patchblox.com/security/data/fix/microsoft/kb5002692.md) | Microsoft SharePoint Enterprise Server 2016 | Apr 8, 2025 | Urgent | 4 | 0 | CVE-2025-29793 | | [KB5002705](https://patchblox.com/security/data/fix/microsoft/kb5002705.md) | Microsoft SharePoint Server Subscription Edition | Apr 8, 2025 | Urgent | 2 | 0 | CVE-2025-29793 | | [KB5002623](https://patchblox.com/security/data/fix/microsoft/kb5002623.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Apr 8, 2025 | Urgent | 7 | 0 | CVE-2025-29792 | | [KB5002700](https://patchblox.com/security/data/fix/microsoft/kb5002700.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Apr 8, 2025 | Urgent | 7 | 0 | CVE-2025-29792 | | [KB5002699](https://patchblox.com/security/data/fix/microsoft/kb5002699.md) | Office Online Server | Apr 8, 2025 | High | 3 | 0 | CVE-2025-27751 | | [KB5002704](https://patchblox.com/security/data/fix/microsoft/kb5002704.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Apr 8, 2025 | High | 3 | 0 | CVE-2025-27751 | | [KB5056456](https://patchblox.com/security/data/fix/microsoft/kb5056456.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Apr 11, 2025 | High | 1 | 0 | CVE-2025-21174 | | [KB5002669](https://patchblox.com/security/data/fix/microsoft/kb5002669.md) | Microsoft Office 2016 (64-bit edition) | Apr 8, 2025 | High | 1 | 0 | CVE-2025-27744 | | [KB5002680](https://patchblox.com/security/data/fix/microsoft/kb5002680.md) | Microsoft SharePoint Server 2019, SharePoint Server Subscription Edition Language Pack | Apr 8, 2025 | High | 2 | 0 | CVE-2025-27746 | | [KB4484432](https://patchblox.com/security/data/fix/microsoft/kb4484432.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Apr 8, 2025 | High | 1 | 0 | CVE-2025-27746 | | [KB5002702](https://patchblox.com/security/data/fix/microsoft/kb5002702.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition) and 1 more | Apr 8, 2025 | High | 3 | 0 | CVE-2025-27747 | | [KB5002682](https://patchblox.com/security/data/fix/microsoft/kb5002682.md) | Microsoft SharePoint Enterprise Server 2016 | Apr 8, 2025 | High | 2 | 0 | CVE-2025-27747 | | [KB5002622](https://patchblox.com/security/data/fix/microsoft/kb5002622.md) | Microsoft OneNote 2016 (32-bit edition), Microsoft OneNote 2016 (64-bit edition) | Apr 8, 2025 | High | 1 | 0 | CVE-2025-29822 | | [KB5002588](https://patchblox.com/security/data/fix/microsoft/kb5002588.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Apr 8, 2025 | High | 1 | 0 | CVE-2025-26642 | | [KB5002701](https://patchblox.com/security/data/fix/microsoft/kb5002701.md) | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) | Apr 8, 2025 | High | 1 | 0 | CVE-2025-26642 | | [KB5002703](https://patchblox.com/security/data/fix/microsoft/kb5002703.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Apr 8, 2025 | High | 1 | 0 | CVE-2025-26642 | | [KB5055515](https://patchblox.com/security/data/fix/microsoft/kb5055515.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Windows Server 2008 for 32-bit Systems Service Pack 2 and 7 more | Apr 8, 2025 | High | 1 | 0 | CVE-2025-27737 | | [KB5002573](https://patchblox.com/security/data/fix/microsoft/kb5002573.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Apr 8, 2025 | High | 1 | 0 | CVE-2025-29816 | | [KB5056716](https://patchblox.com/security/data/fix/microsoft/kb5056716.md) | Microsoft Dynamics 365 Business Central 2023 Wave 2 – Update 23.18 | Apr 8, 2025 | Routine | 1 | 0 | CVE-2025-29821 | | [KB5056717](https://patchblox.com/security/data/fix/microsoft/kb5056717.md) | Microsoft Dynamics 365 Business Central Wave 1 2024 – Update 24.12 | Apr 8, 2025 | Routine | 1 | 0 | CVE-2025-29821 | | [KB5056718](https://patchblox.com/security/data/fix/microsoft/kb5056718.md) | Microsoft Dynamics 365 Business Central 2024 Wave 2 – Update 25.6 | Apr 8, 2025 | Routine | 1 | 0 | CVE-2025-29821 | ## macOS updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [Sequoia 15.4.1](https://patchblox.com/security/data/fix/macos/sequoia-15.4.1.md) | Sequoia | Apr 16, 2025 | Patch now | 2 | 2 | CVE-2025-31200 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Ubuntu | 1,518 | 78 | 234 | 234 | | Debian | 495 | 465 | 4 | 4 | | Red Hat | 68 | 96 | 5 | 5 | | sles | 43 | 247 | 3 | 3 | | ol | 38 | 72 | 4 | 4 | | amzn | 31 | 125 | 1 | 1 | | almalinux | 29 | 43 | 5 | 5 | | opensuse-leap | 13 | 34 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [ELSA-2025-3683](https://patchblox.com/security/data/fix/linux/elsa-2025-3683.md) | tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on ol 8 | Apr 8, 2025 | Patch now | 2 | 1 | CVE-2025-24813 | | [RHSA-2025:3683](https://patchblox.com/security/data/fix/linux/rhsa-2025-3683.md) | tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on RHEL 8 | Apr 8, 2025 | Patch now | 2 | 1 | CVE-2025-24813 | | [ELSA-2025-3645](https://patchblox.com/security/data/fix/linux/elsa-2025-3645.md) | tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on ol 9 | Apr 7, 2025 | Patch now | 2 | 1 | CVE-2025-24813 | | [RHSA-2025:3645](https://patchblox.com/security/data/fix/linux/rhsa-2025-3645.md) | tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on RHEL 9 | Apr 7, 2025 | Patch now | 2 | 1 | CVE-2025-24813 | | [SUSE-SU-2025:1126-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1126-1.md) | tomcat on opensuse-leap 15.6, sles 15.6 | Apr 3, 2025 | Patch now | 2 | 1 | CVE-2025-24813 | | [ALSA-2025:3683](https://patchblox.com/security/data/fix/linux/alsa-2025-3683.md) | tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on almalinux 8 | Apr 8, 2025 | Patch now | 1 | 1 | CVE-2025-24813 | | [ALSA-2025:3645](https://patchblox.com/security/data/fix/linux/alsa-2025-3645.md) | tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on almalinux 9 | Apr 7, 2025 | Patch now | 1 | 1 | CVE-2025-24813 | | [DSA-5893-1](https://patchblox.com/security/data/fix/linux/dsa-5893-1.md) | tomcat10 on Debian 12.15 (bookworm) | Apr 5, 2025 | Patch now | 1 | 1 | CVE-2025-24813 | | [DLA-4108-1](https://patchblox.com/security/data/fix/linux/dla-4108-1.md) | tomcat9 on Debian 11.6 (bullseye) | Apr 1, 2025 | Patch now | 1 | 1 | CVE-2025-24813 | | [SUSE-SU-2025:1356-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1356-1.md) | erlang26 on opensuse-leap 15.6, sles 15.6 | Apr 22, 2025 | Patch now | 2 | 1 | CVE-2025-32433 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo