cve.bz

Microsoft Patch Tuesday, April 2026: the CVEs, page 2

Filter

Microsoft Patch Tuesday April 2026: the CVEs Microsoft published on 14 April 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025, Jun 2025, May 2025, Apr 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 6.5CVE-2026-27925EPSS 0.4%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

  2. 7.8CVE-2026-27924EPSS 0.3%

    Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2026-27923EPSS 0.2%

    Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  4. 7.0CVE-2026-27922EPSS 0.2%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  5. 7.0CVE-2026-27921EPSS 1.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  6. 7.8CVE-2026-27920EPSS 0.2%

    Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  7. 7.8CVE-2026-27919EPSS 0.3%

    Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  8. 7.0CVE-2026-27918EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2026-27917EPSS 0.3%

    Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.

  10. 7.8CVE-2026-27916EPSS 0.2%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-27915EPSS 0.3%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2026-27914EPSS 2.5%

    Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

  13. 7.7CVE-2026-27913EPSS 0.3%

    Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

  14. 8.0CVE-2026-27912EPSS 0.6%

    Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

  15. 7.8CVE-2026-27911EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-27910EPSS 0.2%

    Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

  17. 7.8CVE-2026-27909EPSS 1.8%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  18. 7.0CVE-2026-27908EPSS 1.6%

    Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2026-27907EPSS 0.3%

    Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  20. 4.4CVE-2026-27906EPSS 0.4%

    Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

  21. 7.8CVE-2026-26184EPSS 0.2%

    Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-26183EPSS 0.3%

    Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-26182EPSS 0.2%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-26181EPSS 0.2%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2026-26180EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-26179EPSS 0.5%

    Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  27. 8.8CVE-2026-26178EPSS 0.4%

    Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-26177EPSS 0.2%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-26176EPSS 0.2%

    Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.

  30. 4.6CVE-2026-26175EPSS 0.4%

    Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.

  31. 7.0CVE-2026-26174EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

  32. 7.0CVE-2026-26173EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-26172EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  34. 7.5CVE-2026-26171EPSS 1.8%

    Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

  35. 7.8CVE-2026-26170EPSS 0.2%

    Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

  36. 6.1CVE-2026-26169EPSS 2.4%

    Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

  37. 7.8CVE-2026-26168EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-26167EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-26166EPSS 0.3%

    Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

  40. 7.0CVE-2026-26165EPSS 0.3%

    Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-26163EPSS 0.3%

    Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-26162EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2026-26161EPSS 0.3%

    Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  44. 7.8CVE-2026-26160EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

  45. 7.8CVE-2026-26159EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2026-26156EPSS 0.4%

    Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

  47. 6.5CVE-2026-26155EPSS 0.9%

    Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

  48. 7.5CVE-2026-26154EPSS 1.1%

    Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

  49. 7.8CVE-2026-26153EPSS 0.3%

    Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

  50. 7.0CVE-2026-26152EPSS 0.2%

    Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

  51. 7.1CVE-2026-26151EPSS 0.9%

    Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.

  52. 9.0CVE-2026-26149EPSS 0.6%

    Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.

  53. 7.8CVE-2026-26143EPSS 0.6%

    Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

  54. 7.0CVE-2026-25184EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized attacker to elevate privileges locally.

  55. 5.7CVE-2026-23670EPSS 0.3%

    Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

  56. 7.5CVE-2026-23666EPSS 1.4%

    Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

  57. 7.8CVE-2026-23657EPSS 0.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  58. 6.5CVE-2026-23653EPSS 0.8%

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.

  59. 5.4CVE-2026-20945EPSS 20%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  60. 7.8CVE-2026-20930EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

  61. 4.6CVE-2026-20928EPSS 0.4%

    Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.

  62. 5.5CVE-2026-20806EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally.

  63. 6.7CVE-2026-0390EPSS 0.3%

    Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.