Patch Tuesday, April 2026 Edition
Summary: Microsoft's April 2026 Patch Tuesday fixed 167 vulnerabilities in Windows and related software, including an actively exploited SharePoint Server spoofing flaw tracked as CVE-2026-32201 and a Windows Defender privilege escalation bug, CVE-2026-33825, dubbed BlueHammer. Google Chrome fixed its fourth zero-day of 2026 and Adobe issued an emergency Reader update for CVE-2026-34621, which Tenable's Satnam Narang said shows signs of exploitation since at least November 2025.
What you should know: Tenable's Satnam Narang called this Microsoft's second-biggest Patch Tuesday ever, and Rapid7's Adam Barnett attributed the volume partly to expanding AI capabilities - meaning the patch load your team must absorb each cycle is trending up, not leveling off.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-32201CVE-2026-33825CVE-2026-34621CVE-2026-5281
- Related
- CVE-2026-33825: Microsoft Defender Insufficient Granularity of Access Control Vulnerability Known Exploited Vulnerabilities · Apr 22, 2026CVE-2026-32201: Microsoft Share Point Server Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 14, 2026CVE-2026-34621: Adobe Acrobat and Reader Prototype Pollution Vulnerability Known Exploited Vulnerabilities · Apr 13, 2026