Microsoft · Security update · April 9, 2025
KB5055547: April 2025 cumulative update for Windows 10 1507
KB5055547, released April 9, 2025, fixes 44 CVEs across 2 products. One of them is being exploited (CVE-2025-29824); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
44
4 rated Critical
Exploited
1
CVE-2025-29824
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.1925
97th percentile
Priority of the 44 CVEs
Patch now 1
Urgent 7
High 28
Routine 8
Applies to
| Product | Build after install |
|---|---|
| Windows 10 for 32-bit Systems | 10240.20979 |
| Windows 10 for x64-based Systems | 10240.20979 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-29824 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.1925 | KEVRansomwareExploited |
| Urgent | CVE-2025-26670 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.1 | 0.1105 | More likely |
| Urgent | CVE-2025-29809 | Windows Kerberos | Security Feature Bypass | 7.1 | 0.0426 | More likely |
| Urgent | CVE-2025-26663 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.1 | 0.0179 | More likely |
| Urgent | CVE-2025-27472 | Windows Mark of the Web (MOTW) | Security Feature Bypass | 5.4 | 0.0154 | More likely |
| Urgent | CVE-2025-27491 | Windows Hyper-V | Remote Code Execution | 7.1 | 0.0143 | Exploitation Less Likely |
| Urgent | CVE-2025-26686 | Windows TCP/IP | Remote Code Execution | 7.5 | 0.0142 | Exploitation Less Likely |
| Urgent | CVE-2025-27727 | Windows Installer | Elevation of Privilege | 7.8 | 0.0104 | More likely |
| High | CVE-2025-21204 | Windows Update Stack | Elevation of Privilege | 7.8 | 0.0713 | Exploitation Less Likely |
| High | CVE-2025-26673 | Windows LDAP - Lightweight Directory Access Protocol | Denial of Service | 7.5 | 0.0273 | Exploitation Less Likely |
| High | CVE-2025-29810 | Active Directory Domain Services | Elevation of Privilege | 7.5 | 0.0262 | Exploitation Less Likely |
| High | CVE-2025-27469 | Windows LDAP - Lightweight Directory Access Protocol | Denial of Service | 7.5 | 0.0257 | Exploitation Less Likely |
| High | CVE-2025-26641 | Windows Cryptographic Services | Denial of Service | 7.5 | 0.0227 | Exploitation Less Likely |
| High | CVE-2025-27473 | Windows HTTP.sys | Denial of Service | 7.5 | 0.0227 | Exploitation Less Likely |
| High | CVE-2025-27477 | Windows Telephony Service | Remote Code Execution | 8.8 | 0.0161 | Exploitation Less Likely |
| High | CVE-2025-26669 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 8.8 | 0.0153 | Exploitation Less Likely |
| High | CVE-2025-27487 | Remote Desktop Client | Remote Code Execution | 8.0 | 0.0152 | Exploitation Less Likely |
| High | CVE-2025-21205 | Windows Telephony Service | Remote Code Execution | 8.8 | 0.0139 | Exploitation Less Likely |
| High | CVE-2025-21221 | Windows Telephony Service | Remote Code Execution | 8.8 | 0.0139 | Exploitation Less Likely |
| High | CVE-2025-21222 | Windows Telephony Service | Remote Code Execution | 8.8 | 0.0139 | Exploitation Less Likely |
| High | CVE-2025-27481 | Windows Telephony Service | Remote Code Execution | 8.8 | 0.0127 | Exploitation Less Likely |
| High | CVE-2025-26668 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0126 | Exploitation Less Likely |
| High | CVE-2025-26687 | Windows Win32K - GRFX | Elevation of Privilege | 7.5 | 0.0116 | Exploitation Less Likely |
| High | CVE-2025-27484 | Windows Universal Plug and Play (UPnP) Device Host | Elevation of Privilege | 7.5 | 0.0083 | Exploitation Less Likely |
| High | CVE-2025-27741 | Windows NTFS | Elevation of Privilege | 7.8 | 0.0082 | Exploitation Less Likely |
Showing 1 to 25 of 44
1Next