logo

Microsoft Issues Massive Windows Patch for 160+ Bugs, Including Two Zero-Days

ID: 3bc4d34a-4ad8-5846-85f0-ad9f7c65dfd7

STIX ID: report--3bc4d34a-4ad8-5846-85f0-ad9f7c65dfd7

Feed Name: TechRepublic Security

Threat Score
80/100

Date Published: 2026-04-15

Date Updated: 2026-04-23

Author: Aminu Abdullahi

...
...

Microsoft pushed a massive monthly security update fixing 165 vulnerabilities, including two zero-days (a SharePoint spoofing CVE-2026-32201 and a Microsoft Defender privilege escalation CVE-2026-33825 with public PoC "BlueHammer"), a critical IKEv2 RCE (CVE-2026-33824, CVSS 9.8), and multiple Office RCEs; organizations are urged to prioritize patching and apply mitigations such as blocking UDP 500/4500 where immediate patching is not feasible.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.