2026-04-15: Microsoft patched 167 vulnerabilities including an actively exploited SharePoint spoofing flaw

Show Notes - 2026-04-15

Stories Covered

• April 15, 2026
• Today:
• Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-32201) [Critical Alerts]
• Microsoft Defender Elevation of Privilege (CVE-2026-33825, BlueHammer) [Critical Alerts]
• Windows Internet Key Exchange RCE (CVE-2026-33824) [Critical Alerts]
• Windows TCP/IP Remote Code Execution (CVE-2026-33827) [Critical Alerts]
• Windows Active Directory Remote Code Execution (CVE-2026-33826) [Critical Alerts]
• CISA Adds Legacy Microsoft Office RCE to KEV Catalog (CVE-2009-0238) [Critical Alerts]
• CPU-Z Watering Hole Attack Delivered Signed Malware for 19 Hours [Business & Infrastructure Threats]
• Ransomware Gang 0APT Threatens Rival Group Krybit [Ransomware & Extortion]
• Microsoft April 2026 Patch Tuesday - 167 Vulnerabilities [Vulnerability Disclosures]
• Microsoft Office Remote Code Execution Vulnerabilities [Vulnerability Disclosures]
• Remote Desktop Client RCE (CVE-2026-32157) [Vulnerability Disclosures]
• .NET Framework Denial of Service (CVE-2026-23666) [Vulnerability Disclosures]
• Git for Windows NTLM Hash Leak (CVE-2026-32631) [Vulnerability Disclosures]
• Windows Server Update Service Tampering Vulnerability (CVE-2026-26154) [Windows / AD Security]
• SharePoint Server Spoofing Vulnerability (CVE-2026-20945) [Windows / AD Security]
• Node.js TLS Denial of Service (CVE-2026-21637) [Windows / AD Security]
• Windows 11 and Windows 10 Cumulative Updates Released [Windows / AD Security]
• OpenAI Launches GPT-5.4-Cyber for Security Teams [General Security News]
• Google Adds Rust-Based DNS Parser to Pixel 10 Modem [General Security News]
• Adobe Reader Zero-Day Actively Exploited Since November 2025 [General Security News]
• Google Chrome Zero-Day (CVE-2026-5281) [General Security News]
• Fortinet FortiClient EMS Critical Vulnerability (CVE-2026-35616) [General Security News]
• ICS Patch Tuesday - 8 Industrial Vendors Release Updates [General Security News]
• California Cybersecurity Audit Rule Now in Effect [General Security News]

CVEs Referenced

CVE-2009-0238, CVE-2023-20585, CVE-2024-27227, CVE-2026-20945, CVE-2026-21637, CVE-2026-23666, CVE-2026-25250, CVE-2026-26154, CVE-2026-32157, CVE-2026-32190, CVE-2026-32201, CVE-2026-32631, CVE-2026-33114, CVE-2026-33115, CVE-2026-33824, CVE-2026-33825, CVE-2026-33826, CVE-2026-33827, CVE-2026-34621, CVE-2026-35616, CVE-2026-5281

Read the full brief