Microsoft · Security update · April 8, 2025
KB5002623: April 2025 security update
KB5002623, released April 8, 2025, fixes 7 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
7
5 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.0116
67th percentile
Priority of the 7 CVEs
Patch now 0
Urgent 6
High 1
Routine 0
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-29792 | Microsoft Office | Elevation of Privilege | 7.3 | 0.0116 | More likely |
| Urgent | CVE-2025-27745 | Microsoft Office | Remote Code Execution | 7.8 | 0.0110 | Exploitation Less Likely |
| Urgent | CVE-2025-27748 | Microsoft Office | Remote Code Execution | 7.8 | 0.0110 | Exploitation Less Likely |
| Urgent | CVE-2025-27749 | Microsoft Office | Remote Code Execution | 7.8 | 0.0110 | Exploitation Less Likely |
| Urgent | CVE-2025-27752 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0106 | Exploitation Less Likely |
| Urgent | CVE-2025-29791 | Microsoft Office | Remote Code Execution | 7.8 | 0.0106 | Exploitation Less Likely |
| High | CVE-2025-29816 | Microsoft Office Word | Security Feature Bypass | 7.5 | 0.0048 | Exploitation Less Likely |
Showing 1 to 7 of 7
1