Microsoft Rolls Out Record Patch Tuesday: 169 Fixes Including SharePoint Zero-Day Exploited in the Wild
TL;DR Summary
Microsoft released a record Patch Tuesday with 169 fixes across its products, highlighted by a SharePoint Server zero-day (CVE-2026-32201) that is actively exploited in the wild. The bundle also patches a Defender privilege-escalation flaw (CVE-2026-33825) tied to BlueHammer and a high-risk IKEv2 remote-code-execution issue (CVE-2026-33824) rated 9.8, along with extensive Edge updates and other critical/important vulnerabilities. Some of the flaws are listed in the CISA KEV catalog, triggering remediation deadlines for government agencies (by April 28, 2026).
- Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities The Hacker News
- ‘Starting In April’—Microsoft Changes Windows Update After 15 Years Forbes
- Patch Tuesday, April 2026 Edition Krebs on Security
- Microsoft Patches Exploited SharePoint Zero-Day and 160 Other Vulnerabilities SecurityWeek
- Microsoft Discloses ‘Monstrous’ Number Of Bugs As AI Discoveries Surge: Researcher crn.com
Reading Insights
Total Reads
0
Unique Readers
19
Time Saved
4 min
vs 5 min read
Condensed
92%
915 → 77 words
Want the full story? Read the original article
Read on The Hacker News