On April 15, Microsoft released its April Security Update, addressing a total of 165 security vulnerabilities affecting various products including Windows, Microsoft Office, SQL Server, Visual Studio, and the .NET Framework. This release is critical as it patches multiple high-risk vulnerabilities such as those allowing for privilege escalation and remote code execution.
The breakdown of vulnerabilities fixed in this update includes:
- 8 critical vulnerabilities
- 154 important vulnerabilities
- 2 moderate vulnerabilities
- 1 low-risk vulnerability
Notably, one specific vulnerability—identified as the Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-32201)—has already been exploited in the wild, highlighting the urgency for users to apply the patch immediately.
Key Vulnerabilities to Address
Several vulnerabilities deserve special attention due to their potential impact:
-
Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-32201): This critical vulnerability has a CVSS score of 9.0. It allows unauthenticated attackers to conduct spoofing attacks through the network, granting them access to sensitive information. More Info
-
Windows Kerberos Privilege Escalation Vulnerability (CVE-2026-27912): With a CVSS score of 8.0, this vulnerability allows an authenticated attacker to manipulate Kerberos tickets, potentially gaining domain administrator privileges. More Info
-
Remote Desktop Client Remote Code Execution Vulnerability (CVE-2026-32157): This flaw has a CVSS score of 8.8 and enables unauthenticated attackers to execute arbitrary code on a client host if they trick the user into connecting to a malicious RDP server. More Info
-
Windows TCP/IP Remote Code Execution Vulnerability (CVE-2026-33827): This vulnerability allows unauthenticated attackers to execute arbitrary code through the Windows TCP/IP stack due to an improper synchronization mechanism, carrying a CVSS score of 8.1. More Info
-
Windows Shell Security Feature Bypass Vulnerability (CVE-2026-32225): An attacker can bypass SmartScreen security by tricking victims into opening a crafted .lnk file. This vulnerability has a CVSS score of 8.8. More Info
-
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (CVE-2026-33824): This critical vulnerability, with a CVSS score of 9.8, allows attackers to execute remote code by sending specially crafted packets due to a double-free issue. More Info
Affected Products
The update impacts various versions of Microsoft products, which include:
- Microsoft SharePoint Server (various versions)
- Windows Server 2012 through 2022
- Windows 10 and 11 (various versions)
- Microsoft SQL Server
- Microsoft Office (various products)
Recommended Actions
Microsoft has officially released the necessary patches for the vulnerabilities identified in this update. Users are strongly advised to apply these patches as soon as possible to mitigate the risks associated with these vulnerabilities. For more detailed information on the patches, visit the Microsoft Update Guide.
In summary, users should prioritize updating their systems in light of the critical vulnerabilities that have been discovered this month, particularly those that are actively being exploited.