Trending Now - Microsoft Addresses 167 Vulnerabilities in April Patch Update

WHO:

The Register - Mike Walters, president and cofounder of Action1, commented on the vulnerabilities.

BleepingComputer - Microsoft credited Zen Dodd and Yuanpei XU (HUST) with discovering the Microsoft Defender flaw.

WHAT:

The Register - Microsoft addressed 167 new vulnerabilities in its April 2026 Patch Tuesday update, including 165 new CVEs.

BleepingComputer - The update includes two zero-day vulnerabilities, one of which is actively exploited (CVE-2026-32201) and the other publicly disclosed (CVE-2026-33825).

BleepingComputer - The vulnerabilities include eight classified as "Critical," with seven being remote code execution flaws and one a denial of service flaw.

BleepingComputer - The breakdown of vulnerabilities includes 93 Elevation of Privilege, 13 Security Feature Bypass, 20 Remote Code Execution, 21 Information Disclosure, 10 Denial of Service, and 9 Spoofing vulnerabilities.

WHERE:

The Register - The vulnerabilities are related to Microsoft SharePoint Server and Microsoft Defender, which are used in various organizational environments.

WHEN:

The Register - The vulnerabilities were addressed on April 11th, 2026, during Microsoft's Patch Tuesday.

BleepingComputer - The actively exploited zero-day vulnerability (CVE-2026-32201) was noted as being exploited before the patch was issued on April 11th, 2026.

WHY:

The Register - The spoofing vulnerability (CVE-2026-32201) allows unauthorized attackers to manipulate information presented to users, potentially leading to phishing attacks and unauthorized data manipulation.

BleepingComputer - Microsoft classifies a zero-day flaw as publicly disclosed or actively exploited while no official fix is available.

HOW:

The Register - The spoofing vulnerability is due to improper input validation in SharePoint, allowing attackers to perform spoofing over a network.

BleepingComputer - The Microsoft Defender flaw allows elevation of privilege to SYSTEM privileges, which can be exploited if not patched.

(UPDATED April 15, 2026 04:04 UTC)

Microsoft has addressed 167 new vulnerabilities in its April 20th26 Patch Tuesday update, which includes two zero-day vulnerabilities, one of which is actively exploited. The vulnerabilities, affecting Microsoft SharePoint Server and Microsoft Defender, include eight classified as "Critical," with seven being remote code execution flaws and one a denial of service flaw. Notably, the actively exploited zero-day vulnerability allows unauthorized attackers to manipulate information presented to users, raising concerns about potential phishing attacks and unauthorized data manipulation.