Microsoft Patch Tuesday April 2026 – 168 Vulnerabilities Fixed, Including Actively Exploited 0-day

Microsoft's April 2026 Patch Tuesday fixes 168 vulnerabilities across its product portfolio, notably an actively exploited SharePoint spoofing zero-day (CVE-2026-32201) and a publicly disclosed Defender elevation-of-privilege flaw (CVE-2026-33825). Multiple Critical-rated remote code execution flaws affecting Windows TCP/IP, Active Directory, Remote Desktop, and Office amplify the urgency; organizations are urged to prioritize the zero-day, the publicly disclosed flaw, and all critical RCE patches, and to audit WSUS and BitLocker-related issues.