Master patch listing for April 8th, 2025

Topic

New Reply

I’ve updated the master patch list here.  Please note I am not recommending installing updates at this time, we are just testing and reporting. So far
[See the full post at: Master patch listing for April 8th, 2025]

Susan Bradley Patch Lady/Prudent patcher

6 users thanked author for this post.

AusJohn, LHiggins, deuce120, lmacri, abbodi86, Alex5723

Reply | Quote

Replies

Supposedly the empty C:\inetpub folder is intentional. Hang loose while we investigate.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

The empty inetpub folder is listed here for the Windows 11 23H2 update.

https://support.microsoft.com/en-us/topic/april-8-2025-kb5055528-os-builds-22621-5189-and-22631-5189-b146080a-bd4e-4a10-8ab0-22368c61556b

 

[OS Security] After installing this update or a later Windows update, a new %systemdrive%\inetpub folder will be created on your device. This folder should not be deleted regardless of whether Internet Information Services (IIS) is enabled on the target device. This behavior is part of changes that increase protection and does not require any action from IT admins and end users. For more information, see CVE-2025-21204.

 

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21204

Reply | Quote

Added to the documentation on the 10th

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Born’s Tech and Windows World – Windows vulnerability CVE-2025-29824 attacked; install April 2025 updates

Reply | Quote

Customers running Windows 11, version 24H2 are not affected by the observed exploitation, even if the vulnerability was present.

Mitigation and protection guidance

Reply | Quote

The bypass requires you download and run a malicious file.
Your AV will have detection for this and you have a full backup, of course.  🙂
Relax and wait for DEFCON 3 or 4.

cheers, Paul

Reply | Quote