InfoSecBulletin Cybersecurity for mankind
Microsoft’s April security update, released on Tuesday, addressed 121 vulnerabilities, marking the largest patch for the year. Despite a high number of bulletins, Microsoft addressed only one zero-day flaw this month, down from seven last month. It remains a top priority for IT to patch.
CVE-2025-29824 is a privilege escalation vulnerability in the Windows Common Log File System. While it has not been exploited in the wild yet, it affects all supported versions of Windows OS and Windows Server, and attacks may emerge soon.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
This critical vulnerability affects a vital Windows component, posing risks to businesses and infrastructure. If exploited, attackers can achieve SYSTEM-level access, the highest privilege in Windows.
Tyler Reguly, associate director at security firm Fortra, warns that while this is the only zero-day exploit affecting Windows at the OS level currently, it likely won’t be the last. He noted that such flaws often indicate more similar issues are on the way in the next few months.
“When a vulnerability in CLFS is patched, people tend to dig around and look at what’s going on and come across other vulnerabilities in the process,” Reguly said. “If I was a gambler, I would bet on CLFS appearing again next month.”
After addressing that, IT should apply the 11 “critical” bulletins from Microsoft, which focus on remote code execution vulnerabilities. They include:
CVE-2025-26670: Remote code execution flaw in Windows Lightweight Directory Access Protocol (LDAP) client.
CVE-2025-27752: Remote code execution flaw in Microsoft Excel.
CVE-2025-29791: Remote code execution flaw in Microsoft Excel.
CVE-2025-27745: Remote code execution flaw in Microsoft Office.
CVE-2025-27748: Remote code execution flaw in Microsoft Office.
CVE-2025-27749: Remote code execution flaw in Microsoft Office.
CVE-2025-27491: Remote code execution flaw in Windows Hyper-V.
CVE-2025-26663: Remote code execution flaw in LDAP client.
CVE-2025-27480: Remote code execution flaw in Windows Remote Desktop Services.
CVE-2025-27482: Remote code execution flaw in Windows Remote Desktop Services.
CVE-2025-27486: Remote code execution flaw in Windows TCP/IP.
Click here for April’s complete security bulletins.
