Microsoft’s April 2025 Patch Tuesday Fixes Active Zero-Day Exploits

Microsoft’s April 2025 Patch Tuesday addresses 126 vulnerabilities, including 11 rated Critical, 112 Important, and 2 Low Severity issues. One CVE (CVE-2025-29817) remains reserved with no available details, bringing the documented total to 125 CVEs. This release includes one actively exploited zero-day, CVE-2025-29824, a Use-After-Free vulnerability in the Windows Common Log File System (CLFS) driver. Users are strongly advised to apply updates without delay to reduce the risk of exploitation.