Microsoft Patch Tuesday, April 2026: the CVEs
Filter
Microsoft Patch Tuesday April 2026: the CVEs Microsoft published on 14 April 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025, Jun 2025, May 2025, Apr 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday
- 9.8CVE-2026-33824KEVEPSS 77%
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- 9.0CVE-2026-26149EPSS 0.6%
Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.