Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities

Microsoft’s April 2025 security update discloses 126 vulnerabilities — including 11 critical remote code execution flaws (several marked “Exploitation more likely”) affecting Remote Desktop Gateway, LDAP (client and service), TCP/IP, Hyper‑V, Office/Excel and SharePoint. Microsoft has not observed active exploitation in the wild; Talos has published Snort/SRU rules to detect attempts to exploit a subset of these CVEs and recommends applying vendor patches and updating IDS/IPS signatures.