Microsoft Monthly Security Update (April 2026)

[Updated on 2026-04-17]

Updated Description.

Proof of Concept exploit code is publicly available for CVE-2026-33825. Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

[Updated on 2026-04-23]

Updated Description, Source and Related Link.

CVE-2026-33825 is being exploited in the wild, and Proof of Concept exploit code has been publicly released. Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

[Updated on 2026-04-28]

Updated Description.

CVE-2026-32202 is being exploited in the wild. Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Microsoft has released monthly security update for their products:

Vulnerable Product	Risk Level	Impacts	Notes
Windows	Medium Risk	Elevation of Privilege Security Restriction Bypass Spoofing Data Manipulation Information Disclosure Denial of Service Remote Code Execution	CVE-2026-32202 is being exploited in the wild. Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
Extended Security Updates (ESU)	Medium Risk	Elevation of Privilege Security Restriction Bypass Spoofing Data Manipulation Information Disclosure Denial of Service Remote Code Execution
Developer Tools	Medium Risk	Information Disclosure Spoofing Denial of Service Security Restriction Bypass
Microsoft Office	High Risk	Spoofing Information Disclosure Remote Code Execution	CVE-2026-32201 is being exploited in the wild. Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Microsoft Dynamics	Medium Risk	Security Restriction Bypass Information Disclosure
SQL Server	Medium Risk	Elevation of Privilege Remote Code Execution
Azure	Medium Risk	Elevation of Privilege
Browser	Low Risk	Spoofing
System Center	High Risk	Elevation of Privilege	CVE-2026-33825 is being exploited in the wild, and Proof of Concept exploit code has been publicly released. Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Number of 'Extremely High Risk' product(s): 0

Number of 'High Risk' product(s): 2

Number of 'Medium Risk' product(s): 6

Number of 'Low Risk' product(s): 1

Evaluation of overall 'Risk Level': High Risk