Microsoft's security release of 14 April 2026
Patch Tuesday, April 2026, page 2
As of , CISA lists four of the 163 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-33825, Microsoft Defender Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2026-33095Microsoft Word Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 102 | CVE-2026-33098Windows Container Isolation FS Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 103 | CVE-2026-33101Windows Print Spooler Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 104 | CVE-2026-27913Windows BitLocker Security Feature Bypass | None | Not on CISA's list | 7.7 High | 0.00 |
| 105 | CVE-2026-32156Windows UPnP Device Host Remote Code Execution | None | Not on CISA's list | 7.4 High | 0.00 |
| 106 | CVE-2026-32149Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 7.3 High | 0.00 |
| 107 | CVE-2026-25184Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 108 | CVE-2026-26152Microsoft Cryptographic Services Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 109 | CVE-2026-26165Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 110 | CVE-2026-26166Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 111 | CVE-2026-26173Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 112 | CVE-2026-26174Windows Server Update Service (WSUS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 113 | CVE-2026-26177Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 114 | CVE-2026-26182Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 115 | CVE-2026-27908Windows TDI Translation Driver (tdx.sys) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 116 | CVE-2026-27917Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 117 | CVE-2026-27921Windows TDI Translation Driver (tdx.sys) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 118 | CVE-2026-27922Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 119 | CVE-2026-27926Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 120 | CVE-2026-27929Windows LUA File Virtualization Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 121 | CVE-2026-32068Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 122 | CVE-2026-32070Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 123 | CVE-2026-32073Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 124 | CVE-2026-32075Windows UPnP Device Host Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 125 | CVE-2026-32080Windows WalletService Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 126 | CVE-2026-32082Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 127 | CVE-2026-32083Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 128 | CVE-2026-32086Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 129 | CVE-2026-32087Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 130 | CVE-2026-32093Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 131 | CVE-2026-32150Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 132 | CVE-2026-32195Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 133 | CVE-2026-32219Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 134 | CVE-2026-32224Windows Server Update Service (WSUS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 135 | CVE-2026-33099Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 136 | CVE-2026-33100Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 137 | CVE-2026-33104Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 138 | CVE-2026-0390UEFI Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 139 | CVE-2026-32167SQL Server Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 140 | CVE-2026-32176SQL Server Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 141 | CVE-2026-32072Active Directory Spoofing | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 142 | CVE-2026-26169Windows Kernel Memory Information Disclosure | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 143 | CVE-2026-32088Windows Biometric Service Security Feature Bypass | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 144 | CVE-2026-32196Windows Admin Center Spoofing | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 145 | CVE-2026-33822Microsoft Word Information Disclosure | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 146 | CVE-2026-23670Windows Virtualization-Based Security (VBS) Security Feature Bypass | None | Not on CISA's list | 5.7 Medium | 0.00 |
| 147 | CVE-2026-20806Windows COM Server Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 148 | CVE-2026-32079Web Account Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 149 | CVE-2026-32081Package Catalog Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 150 | CVE-2026-32084Windows Print Spooler Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 151 | CVE-2026-32085Remote Procedure Call Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 152 | CVE-2026-32181Connected User Experiences and Telemetry Service Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 153 | CVE-2026-32212Universal Plug and Play (upnp.dll) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 154 | CVE-2026-32214Universal Plug and Play (upnp.dll) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 155 | CVE-2026-32215Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 156 | CVE-2026-32216Windows Redirected Drive Buffering System Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 157 | CVE-2026-32217Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 158 | CVE-2026-32218Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 159 | CVE-2026-33103Microsoft Dynamics 365 (On-Premises) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 160 | CVE-2026-20928Windows Recovery Environment Security Feature Bypass | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 161 | CVE-2026-26175Windows Boot Manager Security Feature Bypass | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 162 | CVE-2026-27906Windows Hello Security Feature Bypass | None | Not on CISA's list | 4.4 Medium | 0.00 |
| 163 | CVE-2026-32220UEFI Secure Boot Security Feature Bypass | None | Not on CISA's list | 4.4 Medium | 0.00 |