Microsoft · Security update · April 8, 2025

KB5055528: April 2025 cumulative update for Windows 11 22H2

KB5055528, released April 8, 2025, fixes 67 CVEs across 4 products. One of them is being exploited (CVE-2025-29824); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
67
4 rated Critical
Exploited
1
CVE-2025-29824
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.1925
97th percentile

Priority of the 67 CVEs

Patch now 1 Urgent 7 High 46 Routine 13

Applies to

Product
Windows 11 Version 22H2 for ARM64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1925 KEVRansomwareExploited
Urgent CVE-2025-26670 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.1105 More likely
Urgent CVE-2025-29809 Windows Kerberos Security Feature Bypass 7.1 0.0426 More likely
Urgent CVE-2025-26663 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0179 More likely
Urgent CVE-2025-27491 Windows Hyper-V Remote Code Execution 7.1 0.0143 Exploitation Less Likely
Urgent CVE-2025-26686 Windows TCP/IP Remote Code Execution 7.5 0.0142 Exploitation Less Likely
Urgent CVE-2025-27727 Windows Installer Elevation of Privilege 7.8 0.0104 More likely
Urgent CVE-2025-29812 Windows Kernel Memory Elevation of Privilege 7.8 0.0093 More likely
High CVE-2025-21204 Windows Update Stack Elevation of Privilege 7.8 0.0713 Exploitation Less Likely
High CVE-2025-26673 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0273 Exploitation Less Likely
High CVE-2025-29810 Active Directory Domain Services Elevation of Privilege 7.5 0.0262 Exploitation Less Likely
High CVE-2025-27469 Windows LDAP - Lightweight Directory Access Protocol Denial of Service 7.5 0.0257 Exploitation Less Likely
High CVE-2025-26641 Windows Cryptographic Services Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-27473 Windows HTTP.sys Denial of Service 7.5 0.0227 Exploitation Less Likely
High CVE-2025-27477 Windows Telephony Service Remote Code Execution 8.8 0.0161 Exploitation Less Likely
High CVE-2025-26669 Windows Routing and Remote Access Service (RRAS) Information Disclosure 8.8 0.0153 Exploitation Less Likely
High CVE-2025-27487 Remote Desktop Client Remote Code Execution 8.0 0.0152 Exploitation Less Likely
High CVE-2025-21205 Windows Telephony Service Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2025-21221 Windows Telephony Service Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2025-21222 Windows Telephony Service Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2025-27481 Windows Telephony Service Remote Code Execution 8.8 0.0127 Exploitation Less Likely
High CVE-2025-26668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0126 Exploitation Less Likely
High CVE-2025-26687 Windows Win32K - GRFX Elevation of Privilege 7.5 0.0116 Exploitation Less Likely
High CVE-2025-27729 Windows Shell Remote Code Execution 7.8 0.0083 Exploitation Less Likely
High CVE-2025-27484 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege 7.5 0.0083 Exploitation Less Likely
Showing 1 to 25 of 67 1Next