VulnerabilitycriticalExploited in the wild

Patch Tuesday, April 2026 Edition

Krebs on SecurityApr 15, 2026 · 00:00 UTC (Apr 15, 2026)2 min read1 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-32201 CVE-2026-33825 CVE-2026-34621 CVE-2026-5281

Tags: cve-2026-32201 cve-2026-33825 cve-2026-34621 cve-2026-5281 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-32201	Improper Input Validation Spoofing Vulnerability in Microsoft SharePoint Server	6.5	43%	KEV	Apr 14, 2026 KEV Apr 14, 2026
CVE-2026-33825	Local Privilege Escalation in Microsoft Defender Antimalware Platform	7.8	7%	KEVRansomwarePoC	Apr 14, 2026 KEV Apr 22, 2026
CVE-2026-34621	Actively Exploited Prototype Pollution RCE in Adobe Acrobat and Reader	8.6	7%	KEV	Apr 11, 2026 KEV Apr 13, 2026
CVE-2026-5281	Use-After-Free in Google Chrome's Dawn (WebGPU) Component Enables Arbitrary Code Execution	8.8	14%	KEV	Apr 1, 2026 KEV Apr 1, 2026

From the original article

2 min read at krebsonsecurity.com

Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed “ BlueHammer .”

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.