Microsoft · Security update · April 8, 2025

KB5055521: April 2025 cumulative update for Windows 10 1607

KB5055521, released April 8, 2025, fixes 61 CVEs across 4 products. One of them is being exploited (CVE-2025-29824); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
61
6 rated Critical
Exploited
1
CVE-2025-29824
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.1925
97th percentile

Priority of the 61 CVEs

Patch now 1 Urgent 8 High 38 Routine 14

Applies to

ProductBuild after install
Windows 10 Version 1607 for 32-bit Systems14393.7969
Windows 10 Version 1607 for x64-based Systems14393.7969
Windows Server 201614393.7969
Windows Server 2016 (Server Core installation)14393.7969

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1925 KEVRansomwareExploited
Urgent CVE-2025-27480 Remote Desktop Gateway Service Remote Code Execution 8.1 0.1262 More likely
Urgent CVE-2025-26670 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.1105 More likely
Urgent CVE-2025-29809 Windows Kerberos Security Feature Bypass 7.1 0.0426 More likely
Urgent CVE-2025-26663 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0179 More likely
Urgent CVE-2025-27482 Remote Desktop Gateway Service Remote Code Execution 8.1 0.0165 More likely
Urgent CVE-2025-27491 Windows Hyper-V Remote Code Execution 7.1 0.0143 Exploitation Less Likely
Urgent CVE-2025-26686 Windows TCP/IP Remote Code Execution 7.5 0.0142 Exploitation Less Likely
Urgent CVE-2025-27727 Windows Installer Elevation of Privilege 7.8 0.0104 More likely
High CVE-2025-21204 Windows Update Stack Elevation of Privilege 7.8 0.0713 Exploitation Less Likely
High CVE-2025-27740 Windows Active Directory Certificate Services Elevation of Privilege 8.8 0.0352 Exploitation Less Likely
High CVE-2025-26673 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0273 Exploitation Less Likely
High CVE-2025-29810 Active Directory Domain Services Elevation of Privilege 7.5 0.0262 Exploitation Less Likely
High CVE-2025-27469 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0257 Exploitation Less Likely
High CVE-2025-26652 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0235 Exploitation Less Likely
High CVE-2025-27470 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0235 Exploitation Less Likely
High CVE-2025-26647 Windows Kerberos Elevation of Privilege 8.8 0.0230 Exploitation Less Likely
High CVE-2025-26641 Windows Cryptographic Services Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-27473 Windows HTTP.sys Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-27479 Windows Kerberos Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-21174 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0218 Exploitation Less Likely
High CVE-2025-27485 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0216 Exploitation Less Likely
High CVE-2025-27486 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0216 Exploitation Less Likely
High CVE-2025-26680 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0204 Exploitation Less Likely
High CVE-2025-27477 Windows Telephony Service Remote Code Execution 8.8 0.0161 Exploitation Less Likely
Showing 1 to 25 of 61 1Next