Story perspectives

Microsoft April Patch Tuesday Fixes 167 Vulnerabilities, Includes Critical SharePoint Zero-Day

4/15/2026

Summary

Story summary

Microsoft's April 2026 Patch Tuesday addressed a critical zero-day in SharePoint Server, CVE-2026-32201, enabling unauthorized spoofing of content and being exploited.
The release addressed 167 vulnerabilities, making this Patch Tuesday one of the largest, with security experts speculating that AI advancements may drive discoveries.
Microsoft also fixed a privilege escalation issue in Windows Defender known as BlueHammer.
Users are advised to restart their browsers regularly to ensure updates are applied.

1 of 1

Story summary

Microsoft's April 2026 Patch Tuesday addressed a critical zero-day in SharePoint Server, CVE-2026-32201, enabling unauthorized spoofing of content and being exploited.
The release addressed 167 vulnerabilities, making this Patch Tuesday one of the largest, with security experts speculating that AI advancements may drive discoveries.
Microsoft also fixed a privilege escalation issue in Windows Defender known as BlueHammer.
Users are advised to restart their browsers regularly to ensure updates are applied.