Tripwire Patch Priority Index for April 2025

Tripwire's April 2025 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Google.

Up first on the list are patches for Microsoft Edge (Chromium-based) and Google Chromium that resolve 11 issues including remote code execution and improper implementation vulnerabilities.

Next on the list are patches for Microsoft Office, Excel, Word, and OneNote. These patches resolve 15 issues, such as elevation of privilege, security feature bypass, and remote code execution vulnerabilities.

Next are patches that affect components of the core Windows operating system. These patches resolve over 65 vulnerabilities, including elevation of privilege, denial of service, information disclosure, and remote code execution vulnerabilities. These vulnerabilities affect Kernel, NTFS, Standards-based storage management, LSA, VBS, Security Zone Mapping, HTTP.sys, DWM Core Library, Remote Desktop Client, Secure Channel, and various others.

Up next are patches for ASP.NET, Visual Studio, Visual Studio Code, and Visual Studio Tools that resolve elevation of privilege, remote code execution, and elevation of privilege vulnerabilities.

Lastly, administrators should focus on server-side patches for Kerberos, Active Directory Domain Services, LDAP, Hyper-V, Telephony Service, Remote Desktop Service, Windows Active Directory Certificate Services, SharePoint, Dynamics, Routing and Remote Access Service (RRAS), and Telephony Server. These patches resolve remote code execution, denial of service, information disclosure, and elevation of privilege vulnerabilities.