\t\t\tOverview<\/p>\n
On April 15, NSFOCUS CERT detected that Microsoft released the April Security Update patch, fixing 165 security issues involving Windows, Microsoft Office, Microsoft SQL Server, Microsoft Visual Studio, Microsoft .NET Framework, Widely used products such as Azure, including high-risk vulnerability types such as privilege escalation and remote code execution.<\/p>\n
Among the vulnerabilities fixed by Microsoft\u2019s monthly update this month, there are 8 critical vulnerabilities, 154 important vulnerabilities, 2 moderate vulnerabilities, and 1 low-risk (Low) vulnerability. These include 1 vulnerability that has been detected for wild exploitation:<\/p>\n
Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-32201)<\/p>\n
Please update the patch as soon as possible for protection. For a complete list of vulnerabilities, please refer to the appendix.<\/p>\n
Reference link: https:\/\/msrc.microsoft.com\/update-guide\/releaseNote\/2026-Apr<\/a><\/p>\n Key Vulnerabilities<\/p>\n Based on the product popularity and vulnerability importance, this update contains vulnerabilities with greater impact. Relevant users are requested to pay special attention:<\/p>\n Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-32201):<\/p>\n There is a spoofing vulnerability in Microsoft SharePoint Server. Due to improper input validation of SharePoint Server, unauthenticated attackers can conduct spoofing attacks through the network to view some sensitive information and tamper with publicly available information. The vulnerability is exploited in the wild and has a CVSS score of 9.0.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-32201<\/a><\/p>\n Windows Kerberos Privilege Escalation Vulnerability (CVE-2026-27912):<\/p>\n There is a privilege escalation vulnerability in Windows Kerberos. Due to improper authorization during the verification process of the Kerberos service ticket request, an authenticated attacker can bypass security checks by manipulating the Kerberos ticket field and elevate privileges on adjacent networks, possibly gaining domain administrator privileges. CVSS score 8.0.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-27912<\/a><\/p>\n Remote Desktop Client remote code execution vulnerability (CVE-2026-32157):<\/p>\n A remote code execution vulnerability exists in the Remote Desktop Client. Due to the Use After Free problem when processing RDP connection parameters, an unauthenticated attacker can execute arbitrary code on the client host by tricking users into connecting to a malicious RDP server. CVSS score 8.8.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-32157<\/a><\/p>\n Windows TCP\/IP Remote Code Execution Vulnerability (CVE-2026-33827):<\/p>\n A remote code execution vulnerability exists in Windows TCP\/IP. Due to improper synchronization mechanism when using shared resources in Windows TCP\/IP, an unauthenticated attacker can exploit this vulnerability over the network to execute arbitrary code. CVSS score 8.1.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-33827<\/a><\/p>\n Windows Shell Security Function Bypass Vulnerability (CVE-2026-32225):<\/p>\n There is a security feature bypass vulnerability in Windows Shell. Due to the failure of the protection mechanism in Windows Shell, an unauthenticated attacker can bypass SmartScreen security protection by tricking the victim into opening a specially crafted .lnk file, resulting in unauthorized operation or access. CVSS score 8.8.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-32225<\/a><\/p>\n Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (CVE-2026-33824):<\/p>\n A remote code execution vulnerability exists in Windows Internet Key Exchange (IKE) Service Extensions, which allows an unauthenticated attacker to send specially crafted packets to IKEv2 enabled Windows systems due to a Double Free issue in the Windows IKE extension. Thereby enabling remote code execution. CVSS score 9.8.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-33824<\/a><\/p>\n Microsoft Defender Privilege Escalation Vulnerability (CVE-2026-33825):<\/p>\n There is a privilege escalation vulnerability in Microsoft Defender. Due to insufficient access control granularity in Microsoft Defender, an authenticated local attacker can elevate privileges to SYSTEM. CVSS score 7.8.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-33825<\/a><\/p>\n Windows Active Directory Remote Code Execution Vulnerability (CVE-2026-33826):<\/p>\n A remote code execution vulnerability exists in Windows Active Directory. Due to improper input validation in Windows Active Directory, an authenticated attacker can send a specially crafted RPC call to the RPC host through an adjacent network to achieve remote code execution. CVSS score 8.0.<\/p>\n Official announcement link: https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-33826<\/a><\/p>\n Scope of Impact<\/p>\n The following are the affected product versions of some key vulnerabilities. For the scope of products affected by other vulnerabilities, please refer to the official announcement link.<\/p>\n Vulnerability Number CVE-2026-32201 CVE-2026-27912 CVE-2026-32157 CVE-2026-33827 CVE-2026-32225 CVE-2026-33824 CVE-2026-33825 CVE-2026-33826 Mitigation<\/p>\n At present, Microsoft has officially released security patches to fix the above vulnerabilities for supported product versions. It is strongly recommended that affected users install patches as soon as possible for protection. The official download link: https:\/\/msrc.microsoft.com\/update-guide\/releaseNote\/2026-Apr<\/a><\/p>\n Note: Patch updates for Windows Update may fail due to network problems, computer environment problems, etc. After installing the patch, users should check whether the patch has been successfully updated in time.<\/p>\n Right-click the Windows icon, select \u201cSettings (N)\u201d, select \u201cUpdate and Security\u201d-\u201cWindows Update\u201d, view the prompt information on this page, or click \u201cView Update History\u201d to view the historical update status.<\/p>\n For updates that have not been successfully installed, you can click the update name to jump to the Microsoft official download page. It is recommended that users click the link on this page and go to the \u201cMicrosoft Update Catalog\u201d website to download the independent program package and install it.<\/p>\n Appendix: Vulnerability List<\/p>\n Affected products Windows Windows Microsoft .NET Framework Microsoft Office Microsoft Office Microsoft Office Windows Windows Windows Microsoft Visual Studio Code CoPilot Chat Extension Windows Microsoft Office Windows Microsoft Dynamics Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Microsoft SQL Server Azure .NET 9.0 installed on Mac OS, Windows Windows Azure Microsoft Office Microsoft Office Azure Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Microsoft .NET Framework Microsoft Office Windows Windows .NET 9.0 installed on Mac OS, Microsoft SQL Server Microsoft Office Windows Windows Windows Microsoft Office PowerShell Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Windows Azure Microsoft SQL Server Windows Microsoft Office Microsoft Office Microsoft Office Microsoft Office Microsoft Office .NET 9.0 installed on Mac OS, .NET 9.0 installed on Mac OS, Windows Windows Windows Windows Microsoft Dynamics Windows Windows System Center Windows Microsoft Edge for Android Microsoft Edge (Chromium-based) Statement<\/p>\n This advisory is only used to describe a potential risk. NSFOCUS does not provide any commitment or promise on this advisory. NSFOCUS and the author will not bear any liability for any direct and\/or indirect consequences and losses caused by transmitting and\/or using this advisory. NSFOCUS reserves all the rights to modify and interpret this advisory. Please include this statement paragraph when reproducing or transferring this advisory. Do not modify this advisory, add\/delete any information to\/from it, or use this advisory for commercial purposes without permission from NSFOCUS.<\/p>\n About NSFOCUS<\/p>\n NSFOCUS, a pioneering leader in cybersecurity, is dedicated to safeguarding telecommunications, Internet service providers, hosting providers, and enterprises from sophisticated cyberattacks.<\/p>\n Founded in 2000, NSFOCUS operates globally with over 3000 employees at two headquarters in Beijing, China, and Santa Clara, CA, USA, and over 50 offices worldwide. It has a proven track record of protecting over 25% of the Fortune Global 500 companies, including four of the five largest banks and six of the world\u2019s top ten telecommunications companies.<\/p>\n Leveraging technical prowess and innovation, NSFOCUS delivers a comprehensive suite of security solutions, including the Intelligent Security Operations Platform (ISOP) for modern SOC, DDoS Protection, Continuous Threat Exposure Management (CTEM) Service and Web Application and API Protection (WAAP). All the solutions and services are augmented by the Security Large Language Model (SecLLM), ML, patented algorithms and other cutting-edge research achievements developed by NSFOCUS.<\/p>\n The post Microsoft\u2019s April Security Update of High-Risk Vulnerability Notice for Multiple Products<\/a> appeared first on NSFOCUS<\/a>.<\/p>\n *** This is a Security Bloggers Network syndicated blog from NSFOCUS<\/a> authored by NSFOCUS<\/a>. Read the original post at: https:\/\/nsfocusglobal.com\/microsofts-april-security-update-of-high-risk-vulnerability-notice-for-multiple-products\/<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"Overview On April 15, NSFOCUS CERT detected that Microsoft released the April Security Update patch, fixing 165 security…\n","protected":false},"author":2,"featured_media":103709,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[24955,45136,61,60,62712,80],"class_list":["post-415152","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-event","tag-icon","tag-ie","tag-ireland","tag-link","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/415152","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=415152"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/415152\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/103709"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=415152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=415152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=415152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nAffected product versions<\/p>\n
\nMicrosoft SharePoint Server Subscription Edition
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019<\/p>\n
\nWindows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 (Server Core installation) Windows Server 2012
Windows Server 2016 (Server Core installation)
Windows Server 2016
Windows Server 2025
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2022 (Server Core installation)
Windows Server 2022
Windows Server 2019 (Server Core installation)
Windows Server 2019<\/p>\n
\nWindows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2016 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows Server 2025
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 24H2 for ARM64-based Systems
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 25H2 for ARM systems
Windows Server 2025 (Server Core installation)
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows Server 2022 (Server Core installation)
Windows Server 2022 Remote Desktop client for Windows Desktop
Windows Server 2019 (Server Core installation)
Windows Server 2019
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows App Client for Windows Desktop
Windows 11 version 26H1 for x64-based Systems
Windows 11 Version 26H1 for ARM64-based Systems<\/p>\n
\nWindows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows Server 2022 (Server Core installation)
Windows Server 2022
Windows Server 2019 (Server Core installation) Windows Server 2019
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows Server 2025 (Server Core installation)
Windows 10 Version 22H2 for 32-bit Systems
Windows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2016 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Windows Server 2025
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 24H2 for ARM64-based Systems
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 25H2 for ARM systems<\/p>\n
\nWindows Server 2016 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Windows Server 2025
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 24H2 for ARM64-based Systems
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 25H2 for ARM systems
Windows Server 2025 (Server Core installation)
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows Server 2022 (Server Core installation)
Windows Server 2022
Windows Server 2019 (Server Core installation) Windows Server 2019
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems<\/p>\n
\nMicrosoft Defender Antimalware Platform<\/p>\n
\nWindows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2016 (Server Core installation)
Windows Server 2016
Windows Server 2025
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2022 (Server Core installation)
Windows Server 2022
Windows Server 2019 (Server Core installation)
Windows Server 2019<\/p>\n
\nCVE No.
\nVulnerability Title
\nSeverity<\/p>\n
\nCVE-2026-32157
\nRemote Desktop Client remote code execution vulnerability
\nCritical<\/p>\n
\nCVE-2026-33826
\nWindows Active Directory Remote Code Execution Vulnerability
\nCritical<\/p>\n
\nCVE-2026-23666
\n.NET Framework Denial of Service Vulnerability
\nCritical<\/p>\n
\nCVE-2026-32190
\nMicrosoft Office Remote Code Execution Vulnerability
\nCritical<\/p>\n
\nCVE-2026-33114
\nMicrosoft Word remote code execution vulnerability
\nCritical<\/p>\n
\nCVE-2026-33115
\nMicrosoft Word remote code execution vulnerability
\nCritical<\/p>\n
\nCVE-2026-33827
\nWindows TCP\/IP Remote Code Execution Vulnerability
\nCritical<\/p>\n
\nCVE-2026-33824
\nWindows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
\nCritical<\/p>\n
\nCVE-2026-20930
\nWindows Management Services Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-23653
\nGitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-25184
\nApplocker Filter Driver (applockerfltr.sys) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-20945
\nMicrosoft SharePoint Server Spoofing Vulnerability
\nImportant<\/p>\n
\nCVE-2026-23670
\nWindows Virtualization-Based Security (VBS) security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-26149
\nMicrosoft Power Apps Security Feature Bypass
\nImportant<\/p>\n
\nCVE-2026-26151
\nRemote Desktop spoofing vulnerability
\nImportant<\/p>\n
\nCVE-2026-26154
\nWindows Server Update Service (WSUS) Tampering Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26155
\nMicrosoft Local Security Authority Subsystem Service information disclosure vulnerability
\nImportant<\/p>\n
\nCVE-2026-26160
\nRemote Desktop Licensing Service privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26161
\nWindows Sensor Data Service privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26162
\nWindows OLE privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26165
\nWindows Shell Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26166
\nWindows Shell Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26167
\nWindows Push Notifications privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26174
\nWindows Server Update Service (WSUS) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26175
\nWindows Boot Manager security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-26179
\nWindows Kernel privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26180
\nWindows Kernel privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26181
\nMicrosoft Brokering File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26183
\nRemote Access Management service\/API (RPC server) privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27906
\nWindows Hello security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-27907
\nWindows Storage Spaces Controller privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27908
\nWindows TDI Translation Driver (tdx.sys) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27915
\nWindows UPnP Device Host privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27917
\nWindows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27918
\nWindows Shell Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27919
\nWindows UPnP Device Host privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27921
\nWindows TDI Translation Driver (tdx.sys) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27924
\nDesktop Window Manager Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27926
\nWindows Cloud Files Mini Filter Driver privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27927
\nWindows Projected File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27929
\nWindows LUA File Virtualization Filter Driver Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27931
\nWindows GDI Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32071
\nWindows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32073
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32075
\nWindows UPnP Device Host privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32081
\nPackage Catalog information leakage vulnerability
\nImportant<\/p>\n
\nCVE-2026-32082
\nWindows Simple Search and Discovery Protocol (SSDP) Service privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32083
\nWindows Simple Search and Discovery Protocol (SSDP) Service privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32085
\nRemote Procedure Call information leakage vulnerability
\nImportant<\/p>\n
\nCVE-2026-32087
\nWindows Function Discovery Service (fdwsd.dll) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32089
\nWindows Speech Brokered Api Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32090
\nWindows Speech Brokered Api Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32093
\nWindows Function Discovery Service (fdwsd.dll) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32152
\nDesktop Window Manager Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32154
\nDesktop Window Manager Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32156
\nWindows UPnP Device Host Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32158
\nWindows Push Notifications privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32159
\nWindows Push Notifications privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32160
\nWindows Push Notifications privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-0390
\nUEFI Secure Boot security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-32165
\nWindows User Interface Core Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32167
\nSQL Server Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32168
\nAzure Monitor Agent privilege escalation vulnerability
\nImportant<\/p>\n
.NET 9.0 installed on Windows,
.NET 10.0 installed on Mac OS,
.NET 9.0 installed on Linux,
.NET,Microsoft Visual Studio,
.NET 10.0 installed on Windows,
.NET 8.0 installed on Windows,
.NET 8.0 installed on Mac OS,
.NET 10.0 installed on Linux,
.NET 8.0 installed on Linux
\nCVE-2026-32178
\n.NET Spoofing Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32181
\nConnected User Experiences and Telemetry Service Denial of Service Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32183
\nWindows Snipping Tool Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32184
\nMicrosoft High Performance Compute (HPC) Pack privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32188
\nMicrosoft Excel Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32189
\nMicrosoft Excel Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32192
\nAzure Monitor Agent privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32195
\nWindows Kernel privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32202
\nWindows Shell Spoofing Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32215
\nWindows Kernel Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32216
\nWindows Redirected Drive Buffering System Denial of Service Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32217
\nWindows Kernel Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32218
\nWindows Kernel Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32219
\nMicrosoft Brokering File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32220
\nUEFI Secure Boot security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-32221
\nWindows Graphics Component Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32222
\nWindows Win32k Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32223
\nWindows USB Printing Stack (usbprint.sys) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32224
\nWindows Server Update Service (WSUS) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32226
\n.NET Framework Denial of Service Vulnerability
\nImportant<\/p>\n
\nCVE-2026-33095
\nMicrosoft Word remote code execution vulnerability
\nImportant<\/p>\n
\nCVE-2026-33096
\nHTTP.sys denial of service vulnerability
\nImportant<\/p>\n
\nCVE-2026-33098
\nWindows Container Isolation FS Filter Driver Escalation Vulnerability
\nImportant<\/p>\n
.NET 9.0 installed on Windows,
Microsoft .NET Framework,
.NET 10.0 installed on Mac OS,
.NET 9.0 installed on Linux,
.NET,.NET 8.0 installed on Windows,
.NET 8.0 installed on Mac OS,
.NET 10.0 installed on Linux,
.NET 8.0 installed on Linux
\nCVE-2026-33116
\n.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
\nImportant<\/p>\n
\nCVE-2026-33120
\nMicrosoft SQL Server Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-33822
\nMicrosoft Word Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32212
\nUniversal Plug and Play (upnp.dll) information disclosure vulnerability
\nImportant<\/p>\n
\nCVE-2026-20928
\nWindows Recovery Environment Security Function Bypass Vulnerability
\nImportant<\/p>\n
\nCVE-2026-20806
\nWindows COM Server Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-23657
\nMicrosoft Word remote code execution vulnerability
\nImportant<\/p>\n
\nCVE-2026-26143
\nMicrosoft PowerShell security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-26152
\nMicrosoft Cryptographic Services privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26153
\nWindows Encrypted File System (EFS) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26156
\nWindows Hyper-V remote code execution vulnerability
\nImportant<\/p>\n
\nCVE-2026-26159
\nRemote Desktop Licensing Service privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26163
\nWindows Kernel privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26168
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26169
\nWindows Kernel Memory Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26170
\nPowerShell privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26172
\nWindows Push Notifications privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-26173
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26176
\nWindows Client Side Caching driver (csc.sys) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26177
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26178
\nWindows Advanced Rasterization Platform Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26182
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-26184
\nWindows Projected File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27909
\nWindows Search Service privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27910
\nWindows Installer privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27911
\nWindows User Interface Core Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27912
\nWindows Kerberos privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27913
\nWindows BitLocker security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-27914
\nMicrosoft Management Console Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27916
\nWindows UPnP Device Host privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27920
\nWindows UPnP Device Host privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-27922
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27923
\nDesktop Window Manager Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-27925
\nWindows UPnP Device Host information disclosure vulnerability
\nImportant<\/p>\n
\nCVE-2026-27928
\nWindows Hello security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-27930
\nWindows GDI Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32068
\nWindows Simple Search and Discovery Protocol (SSDP) Service privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32069
\nWindows Projected File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32070
\nWindows Common Log File System Driver Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32072
\nActive Directory Spoofing Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32074
\nWindows Projected File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32076
\nWindows Storage Spaces Controller privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32077
\nWindows UPnP Device Host privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32078
\nWindows Projected File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32079
\nWeb Account Manager Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32080
\nWindows WalletService privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32084
\nWindows Print Spooler Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32086
\nWindows Function Discovery Service (fdwsd.dll) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32088
\nWindows Biometric Service security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-32091
\nMicrosoft Brokering File System Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32149
\nWindows Hyper-V remote code execution vulnerability
\nImportant<\/p>\n
\nCVE-2026-32150
\nWindows Function Discovery Service (fdwsd.dll) Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32151
\nWindows Shell Information Disclosure Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32153
\nWindows Speech Runtime privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32155
\nDesktop Window Manager Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32162
\nWindows COM Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32163
\nWindows User Interface Core Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32164
\nWindows User Interface Core Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32171
\nAzure Logic Apps privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-32176
\nSQL Server Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32196
\nWindows Admin Center Spoofing Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32197
\nMicrosoft Excel Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32198
\nMicrosoft Excel Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32199
\nMicrosoft Excel Remote Code Execution Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32200
\nMicrosoft PowerPoint remote code execution vulnerability
\nImportant<\/p>\n
\nCVE-2026-32201
\nMicrosoft SharePoint Server Spoofing Vulnerability
\nImportant<\/p>\n
.NET 9.0 installed on Windows,
.NET 10.0 installed on Mac OS,
.NET 9.0 installed on Linux,
.NET 10.0 installed on Windows,
.NET 8.0 installed on Windows,
.NET 8.0 installed on Mac OS,
.NET 10.0 installed on Linux,
.NET 8.0 installed on Linux
\nCVE-2026-26171
\n.NET Denial of Service Vulnerability
\nImportant<\/p>\n
.NET 9.0 installed on Windows,
.NET 10.0 installed on Mac OS,
.NET 9.0 installed on Linux,
Microsoft Visual Studio,
.NET 10.0 installed on Windows,
.NET 8.0 installed on Windows,
.NET 8.0 installed on Mac OS,
.NET 10.0 installed on Linux,
.NET 8.0 installed on Linux
\nCVE-2026-32203
\n.NET and Visual Studio Denial of Service Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32225
\nWindows Shell security feature bypass vulnerability
\nImportant<\/p>\n
\nCVE-2026-33099
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-33100
\nWindows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-33101
\nWindows Print Spooler privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-33103
\nMicrosoft Dynamics 365 (On-Premises) information disclosure vulnerability
\nImportant<\/p>\n
\nCVE-2026-33104
\nWin32k Privilege Escalation Vulnerability
\nImportant<\/p>\n
\nCVE-2026-32214
\nUniversal Plug and Play (upnp.dll) information disclosure vulnerability
\nImportant<\/p>\n
\nCVE-2026-33825
\nMicrosoft Defender privilege escalation vulnerability
\nImportant<\/p>\n
\nCVE-2026-33829
\nWindows Snipping Tool spoofing vulnerability
\nModerate<\/p>\n
\nCVE-2026-33119
\nMicrosoft Edge (Chromium-based) for Android spoofing vulnerability
\nModerate<\/p>\n
\nCVE-2026-33118
\nMicrosoft Edge (Chromium-based) spoofing vulnerability
\nLow<\/p>\n