Microsoft · ServicingStack update · April 8, 2025

KB5055526: April 2025 cumulative update for Windows Server 23H2

KB5055526, released April 8, 2025, fixes 78 CVEs across 3 products. One of them is being exploited (CVE-2025-29824); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
78
6 rated Critical
Exploited
1
CVE-2025-29824
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.1925
97th percentile

Priority of the 78 CVEs

Patch now 1 Urgent 9 High 50 Routine 18

Applies to

ProductBuild after install
Azure Stack HCI OS 22H220348.3453
Windows Server 202220348.3453
Windows Server 2022 (Server Core installation)20348.3453

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1925 KEVRansomwareExploited
Urgent CVE-2025-27480 Remote Desktop Gateway Service Remote Code Execution 8.1 0.1262 More likely
Urgent CVE-2025-26670 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.1105 More likely
Urgent CVE-2025-29809 Windows Kerberos Security Feature Bypass 7.1 0.0426 More likely
Urgent CVE-2025-26663 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0179 More likely
Urgent CVE-2025-27482 Remote Desktop Gateway Service Remote Code Execution 8.1 0.0165 More likely
Urgent CVE-2025-27491 Windows Hyper-V Remote Code Execution 7.1 0.0143 Exploitation Less Likely
Urgent CVE-2025-26686 Windows TCP/IP Remote Code Execution 7.5 0.0142 Exploitation Less Likely
Urgent CVE-2025-27727 Windows Installer Elevation of Privilege 7.8 0.0104 More likely
Urgent CVE-2025-29812 Windows Kernel Memory Elevation of Privilege 7.8 0.0093 More likely
High CVE-2025-21204 Windows Update Stack Elevation of Privilege 7.8 0.0713 Exploitation Less Likely
High CVE-2025-27740 Windows Active Directory Certificate Services Elevation of Privilege 8.8 0.0352 Exploitation Less Likely
High CVE-2025-26673 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0273 Exploitation Less Likely
High CVE-2025-29810 Active Directory Domain Services Elevation of Privilege 7.5 0.0262 Exploitation Less Likely
High CVE-2025-27469 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0257 Exploitation Less Likely
High CVE-2025-26652 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0235 Exploitation Less Likely
High CVE-2025-27470 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0235 Exploitation Less Likely
High CVE-2025-26647 Windows Kerberos Elevation of Privilege 8.8 0.0230 Exploitation Less Likely
High CVE-2025-26641 Windows Cryptographic Services Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-27473 Windows HTTP.sys Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-27479 Windows Kerberos Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-21174 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0218 Exploitation Less Likely
High CVE-2025-27485 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0216 Exploitation Less Likely
High CVE-2025-27486 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0216 Exploitation Less Likely
High CVE-2025-26680 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0204 Exploitation Less Likely
Showing 1 to 25 of 78 1Next