Microsoft April 2025 Patch Tuesday: Fixing 121 Vulnerabilities, Including a Critical Zero-Day

Microsoft has rolled out its April 2025 Patch Tuesday update, addressing 121 security vulnerabilities across its software ecosystem.

This comprehensive update includes fixes for critical issues such as the elevation of privilege, remote code execution, and information disclosure vulnerabilities.

Among the patched flaws is a zero-day vulnerability actively exploited in the wild, underscoring the urgency for users and administrators to apply the updates promptly.

- Advertisement -

Breakdown of Vulnerabilities

The 121 vulnerabilities span multiple categories, with several classified as critical due to their potential to compromise systems or disrupt operations. Below is a detailed breakdown:

• Elevation of Privilege: 49 vulnerabilities
• Remote Code Execution: 31 vulnerabilities
• Information Disclosure: 16 vulnerabilities
• Denial of Service: 14 vulnerabilities
• Security Feature Bypass: 9 vulnerabilities
• Spoofing: 1 vulnerability
• Zero-Day Exploit: 1 vulnerability

The Zero-Day Vulnerability: CVE-2025-29824

The most concerning issue in this update is CVE-2025-29824, a zero-day vulnerability actively exploited prior to the release.

This elevation of privilege flaw resides in the Windows Common Log File System (CLFS) driver, which operates at a low level within the Windows kernel.

If successfully exploited, attackers can gain SYSTEM-level privileges, enabling them to execute arbitrary code, install malware, modify system settings, or access sensitive data.

Microsoft confirmed that attackers leveraging this vulnerability could escalate permissions beyond initial access levels. “An attacker who successfully exploited this vulnerability could gain SYSTEM privileges,” the company stated.

Critical Remote Code Execution Vulnerabilities

In addition to the zero-day exploit, several critical remote code execution vulnerabilities were patched. These include flaws in widely used components such as Microsoft Office, Windows Hyper-V, and Remote Desktop Services. Some notable CVEs include:

• CVE-2025-26663: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2025-27745: Microsoft Office Remote Code Execution Vulnerability
• CVE-2025-27480: Windows Remote Desktop Services Remote Code Execution Vulnerability.

These vulnerabilities could allow attackers to execute malicious code remotely on unpatched systems, posing significant risks to organizations relying on these services.

The update also addresses several elevation of privilege vulnerabilities in components like NTFS, Kerberos, and Visual Studio Tools for Applications.

Denial-of-service flaws affecting HTTP.sys and Windows Standards-Based Storage Management Service were also patched.

Information disclosure vulnerabilities impacting Azure Local Cluster and Microsoft Dynamics Business Central were resolved.

Microsoft Patch Tuesday April 2025

Microsoft strongly advises users and IT administrators to apply these updates immediately via Windows Update or enterprise management tools.

The presence of an actively exploited zero-day makes delaying updates particularly risky.

Organizations should prioritize patching systems vulnerable to remote code execution flaws and elevation of privilege exploits.

The April 2025 Patch Tuesday highlights the growing sophistication of cyber threats and the importance of proactive security measures.

With a zero-day vulnerability actively under attack and numerous critical flaws patched, this update serves as a reminder for organizations to maintain robust defenses against evolving threats.

By applying these patches promptly, users can protect their systems from exploitation and ensure continued security in an increasingly complex digital landscape.

Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates!