What was in the April 2025 Microsoft Patch Tuesday?

Microsoft released 35 updates fixing 110 CVEs in April 2025, of which 1 was actively exploited (CISA KEV) and 1 was ransomware-linked.

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › April 2025

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, April 2025

Released April 8, 2025 · data last refreshed 2026-07-09

Microsoft's April 2025 security release, published April 8, 2025: 35 updates fixing 110 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 1 CVE from this release is on the Senserva hot list today (as of 2026-07-13), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.

Updates (KBs)

110

CVEs fixed

Actively exploited

Ransomware-linked

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-29824Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVSS 7.8ExploitedRansomware Hot now

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-26669Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVSS 8.8

CVE-2025-27477Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-27740Active Directory Certificate Services Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-21205Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21221Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21222Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-26647Windows Kerberos Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2025-27481Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29794Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows 10 Version 1809 for 32-bit Systems (15)Windows 10 Version 1809 for x64-based Systems (15)Windows Server 2019 (15)Microsoft Office 2019 for 32-bit editions (15)Microsoft SharePoint Server 2019 (8)Microsoft Office 2019 for 64-bit editions (8)Office Online Server (7)Microsoft SharePoint Enterprise Server 2016 (5)Microsoft 365 Apps for Enterprise for 32-bit Systems (4)Microsoft Dynamics 365 Business Central Wave 1 2024: Update 24.12 (3)

Take this release to your AI

Composed from the April 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the April 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-04, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 35 updates (KBs) fixing 110 CVEs, 1 actively exploited (CISA KEV), 1 ransomware-linked, 0 Critical updates.
Actively exploited CVEs: CVE-2025-29824 (CVSS 7.8).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← March 2025 May 2025 →