Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for April of 2025 which includes 126 vulnerabilities affecting a range of products, including 11 that Microsoft marked as "critical". In this month's release, none of the included vulnerabilities have been observed by Microsoft to be exploited in...

CVE-2025-27487

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2025-27487

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2025-27480

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-27482

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-27482

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-27480

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-26671

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-26671

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-27487 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2025-27487 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2025-27487

CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...

CVE-2025-27482 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-27482

CVE-2025-27482 is a remote code execution vulnerability in Windows Remote Desktop Gateway Service caused by sensitive data being stored in memory that is not properly locked. The issue enables code execution over the network and is rated high-severity (CVSS 3.1: 8.1). Microsoft’s Patch Tuesday up...

CVE-2025-27482 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-27480

CVE-2025-27480 is described as a Remote Desktop Services/RDP remote code execution vulnerability with a network attack vector (no user interaction) and a base CVSS v3.1 score of 8.1 (HIGH). Public references include a GitHub exploit claiming a remote code execution path and Krebs-style coverage p...

CVE-2025-27480 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-27480 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-26671 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-26671

CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...