April 2026 Patch Tuesday: Two Zero-Days and Eight Critical Vulnerabilities Among 164 CVEs

This bulletin lists and summarizes multiple Microsoft vulnerabilities disclosed in Patch Tuesday, including several critical remote code execution flaws (notably in Windows IKE, TCP/IP, Remote Desktop, Office/Word, and Active Directory), an exploited zero-day in SharePoint (CVE-2026-32201), and a publicly disclosed elevation-of-privilege issue in Microsoft Defender (CVE-2026-33825) with proof-of-concept code; fixes and mitigation guidance are available.