Microsoft Fixes Two Zero-Days in April Patch Tuesday

Microsoft’s Patch Tuesday release includes multiple high-impact fixes: **CVE-2026-32201**, a SharePoint server spoofing zero-day that is being actively exploited; **CVE-2026-33825**, a Microsoft Defender elevation-of-privilege bug that has been publicly disclosed; and **CVE-2026-33824**, a critical IKEv2 remote code execution flaw (CVSS 9.8). Administrators are urged to prioritize patching internet-facing IKEv2 systems and update SharePoint and endpoints to mitigate risks of phishing, lateral movement, and full endpoint compromise.