Urgent Patch Alert: SharePoint Spoofing Under Active Attack as Microsoft Releases April 2026 Updates

Microsoft’s April 2026 Patch Tuesday fixes 163 vulnerabilities — including an actively exploited SharePoint input-validation flaw (CVE-2026-32201) listed in CISA’s KEV catalog and a public Microsoft Defender elevation-of-privilege zero-day (CVE-2026-33825) — and multiple critical RCEs that could enable full system compromise; administrators are urged to prioritize the SharePoint and critical RCE patches before the CISA remediation deadline.