Patch Tuesday security patch, April 2026

Microsoft released a security update (Patch Tuesday) for April 2026 to fix a total of 167 vulnerabilities, with two Zero-Day vulnerabilities and eight Critical Vulnerabilities, Windows 11, KB5083769 / KB5082052, and Windows 10 participating ESU code KB5082200.

.

Of the Zero-Days, one has actually been deployed for attack and one has been publicly exposed. CVE-2026-32201 code, CVSSv3-based violence 6.5 / 10 points and CVE2026-33825-based violence 7.8 / 10 points

.

In this round of updates, there are eight critical vulnerabilities, divided into seven Remote Code Execution - RCE vulnerabilities and one Denial of Service vulnerability.

.

A breakdown of the vulnerabilities that have been addressed is as follows:

- Elevation of Privilege vulnerability: 93 items

- Security Feature Bypass vulnerability: 13 items

- Remote Code Execution: 20 items

- Information Disclosure: 21 items

- Denial of Service vulnerability: 10 items

- Identity forgery vulnerability (Spoofing): 9 items

.

The figures do not include over 80 Microsoft Edge (Chromium) vulnerabilities, including Mariner, Azure, and Bing that were previously patched in the same month.

.

There are also several Microsoft Office (Word and Excel) vulnerabilities that are Remote Code Execution types that can be attacked through opening files or even Preview Pane, allowing users to update quickly.

.

Meanwhile, other software manufacturers also issued security updates in April, including Adobe, Apple, Cisco, Fortinet, Google (Android and Chrome), SAP and Apache, with some of them being severe vulnerabilities, including Zero-Day being used to actually attack.

.

It recommends that system administrators and users rush to install Microsoft security updates and related software as soon as possible to reduce the risk of attack through vulnerabilities that are currently being used.

.

Source: bleepingcomputer

# IT should know # IT News # Includes IT matters # IT