Microsoft Patch Tuesday for April 2026
- CVEs
- CVE-2026-23666CVE-2026-32157CVE-2026-32190CVE-2026-33114CVE-2026-33115CVE-2026-33824CVE-2026-33826CVE-2026-33827CVE-2026-32201CVE-2026-0390CVE-2026-26151CVE-2026-26169CVE-2026-26173CVE-2026-26177CVE-2026-26182CVE-2026-27906CVE-2026-27908CVE-2026-27909CVE-2026-27913CVE-2026-27914CVE-2026-27921CVE-2026-27922CVE-2026-32070CVE-2026-32075CVE-2026-32093CVE-2026-32152CVE-2026-32154CVE-2026-32155CVE-2026-32162CVE-2026-32202CVE-2026-32225CVE-2026-33825
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-32225 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security… | 8.8 group max | 1% | ||
| CVE-2026-23666 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network | 7.5 | 1% | ||
CVE-2026-32155+1 related CVE | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | 7.8 group max | <1% | ||
CVE-2026-33826+1 related CVE | Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network | 8.0 group max | <1% | ||
CVE-2026-32152+1 related CVE | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | 7.8 | <1% | ||
| CVE-2026-32157 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network | 8.8 | <1% | ||
| CVE-2026-32162 | Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally | 8.4 | 2% | ||
CVE-2026-32190+2 related CVEs | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | 8.4 | <1% | ||
| CVE-2026-32201 | Improper Input Validation Spoofing Vulnerability in Microsoft SharePoint Server | 6.5 | 43% | KEV | KEV |
| CVE-2026-32202 | Spoofing Flaw in Windows Shell (CVE-2026-32202) Actively Exploited | 4.3 | 71% | KEV | KEV |
| CVE-2026-33824 | Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension | 9.8 | 77% | KEV | KEV |
| CVE-2026-33825 | Local Privilege Escalation in Microsoft Defender Antimalware Platform | 7.8 | 7% | KEVRansomwarePoC | KEV |
From the original article
4 min read at blog.talosintelligence.com
Microsoft has released its monthly security update for April 2026, which includes 165 vulnerabilities affecting a wide range of products, including eight Microsoft marked as “critical.” CVE-2026-23666 is a critical Denial of Service (DoS) vulnerability that affects the . NET framework.
By Nick Biasini · blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.