KB5055664: Servicing stack update for Windows 10: April 9, 2025

None None...

Microsoft and Adobe Patch Tuesday, April 2025 Security Update Review

Microsoft's April 2025 Patch Tuesday has arrived, delivering critical security updates and fixes across the various products, features, and roles. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for April 2025 In this month's Patch Tuesday, April 2025 edition, Microsoft...

Vulnerability fixed in Microsoft Dynamics

Microsoft has fixed a vulnerability in Dynamics. A vulnerability marked CVE-2025-29821, from incorrect input validation in Dynamics Business Central, allowed a malicious party to gain access to sensitive data. If successfully exploited, the malicious party can recover passwords in unencrypted tex...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft fixed vulnerabilities in Visual Studio and .NET A malicious party could exploit the vulnerabilities to cause a denial-of-service, grant themselves elevated privileges and/or execute arbitrary code with developer privileges. Because developers tend to work under elevated privileges, it...

Exploitation of CLFS zero-day leads to ransomware activity

Microsoft Threat Intelligence Center MSTIC and Microsoft Security Response Center MSRC have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System CLFS against a small number of targets. The targets include organizations in...

CVE-2024-55354

creationtimestamp| type| source ---|---|--- 2025-04-08 17:21:22+00:00| seen| https://bsky.app/profile/zackster.bsky.social/post/3lmcyfg77yk2k 2025-04-09 01:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbgvyej2f 2025-04-09 01:43:19+00:00| seen|...

CVE-2025-32024

bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The EXIF data format allows for defining excessively large data structures in relatively small payloads. Before v0.10.0, If you didn't trust the input images, this could be abused to...

CVE-2025-27480

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:47:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10981 2025-04-08 19:48:37+00:00| seen|...

CVE-2025-27729

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-09 23:48:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11184 2025-04-17 20:16:39+00:00| seen|...

CVE-2025-26679

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:47:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10992...

CVE-2025-27481

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 18:14:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114303700058967662 2025-04-08 19:47:27+00:00| seen|...

CVE-2025-27749

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-09 07:18:23+00:00| seen| https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb 2025-04-10 11:32:21+00:00| seen|...

CVE-2025-29791

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-09 07:18:23+00:00| seen| https://poliverso.org/objects/0477a01e-45bed739-4cf70d274d3babdb 2025-04-09 09:10:24+00:00| seen|...

CVE-2025-21205

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114304071077665600 2025-04-08 20:07:34+00:00| seen|...

CVE-2025-29816

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10963 2025-04-15 16:35:57+00:00| seen|...

CVE-2025-26663

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114304071245143216 2025-04-08 20:07:42+00:00| seen|...

CVE-2025-27741

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-22 00:34:19+00:00| seen| https://infosec.exchange/users/wdormann/statuses/114378804966922705 2025-04-22 00:34:40+00:00| seen|...

CVE-2025-27482

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 19:47:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10989 2025-04-08 19:48:39+00:00| seen|...

CVE-2025-21203

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

SUSE-SU-2025:1177-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. - CVE-2024-35910: tcp: properly terminate timers for kernel sockets...