# KB5082126: April 2026 security update KB5082126, released April 14, 2026, fixes 58 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/microsoft/kb5082126 - Platform: Microsoft - Released: Apr 14, 2026 - Priority: Urgent (Closes CVE-2026-27914, exploitation more likely) - CVEs: 58, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5082126 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2012 R2](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2.md) | | | | [Windows Server 2012 R2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-27914](https://patchblox.com/security/data/cve/CVE-2026-27914.md) | Urgent | Microsoft Management Console | 7.8 | 0.0243 | More likely | | [CVE-2026-27909](https://patchblox.com/security/data/cve/CVE-2026-27909.md) | Urgent | Microsoft Windows Search Component | 7.8 | 0.0177 | More likely | | [CVE-2026-27908](https://patchblox.com/security/data/cve/CVE-2026-27908.md) | Urgent | Windows TDI Translation Driver (tdx.sys) | 7.0 | 0.0155 | More likely | | [CVE-2026-32225](https://patchblox.com/security/data/cve/CVE-2026-32225.md) | Urgent | Windows Shell | 8.8 | 0.0120 | More likely | | [CVE-2026-27921](https://patchblox.com/security/data/cve/CVE-2026-27921.md) | Urgent | Windows TCP/IP | 7.0 | 0.0119 | More likely | | [CVE-2026-32093](https://patchblox.com/security/data/cve/CVE-2026-32093.md) | Urgent | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0112 | More likely | | [CVE-2026-33827](https://patchblox.com/security/data/cve/CVE-2026-33827.md) | Urgent | Windows TCP/IP | 8.1 | 0.0084 | | | [CVE-2026-26151](https://patchblox.com/security/data/cve/CVE-2026-26151.md) | Urgent | Windows Remote Desktop | 7.1 | 0.0083 | More likely | | [CVE-2026-32157](https://patchblox.com/security/data/cve/CVE-2026-32157.md) | Urgent | Remote Desktop Client | 8.8 | 0.0078 | | | [CVE-2026-33826](https://patchblox.com/security/data/cve/CVE-2026-33826.md) | Urgent | Windows Active Directory | 8.0 | 0.0054 | More likely | | [CVE-2026-32070](https://patchblox.com/security/data/cve/CVE-2026-32070.md) | Urgent | Windows Common Log File System Driver | 7.0 | 0.0032 | More likely | | [CVE-2026-27913](https://patchblox.com/security/data/cve/CVE-2026-27913.md) | Urgent | Windows BitLocker | 7.7 | 0.0030 | More likely | | [CVE-2026-32075](https://patchblox.com/security/data/cve/CVE-2026-32075.md) | Urgent | Windows Universal Plug and Play (UPnP) Device Host | 7.0 | 0.0027 | More likely | | [CVE-2026-26154](https://patchblox.com/security/data/cve/CVE-2026-26154.md) | High | Windows Server Update Service | 7.5 | 0.0106 | | | [CVE-2026-32183](https://patchblox.com/security/data/cve/CVE-2026-32183.md) | High | Windows Snipping Tool | 7.8 | 0.0062 | | | [CVE-2026-27912](https://patchblox.com/security/data/cve/CVE-2026-27912.md) | High | Windows Kerberos | 8.0 | 0.0041 | | | [CVE-2026-32073](https://patchblox.com/security/data/cve/CVE-2026-32073.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0035 | | | [CVE-2026-32077](https://patchblox.com/security/data/cve/CVE-2026-32077.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0032 | | | [CVE-2026-26162](https://patchblox.com/security/data/cve/CVE-2026-26162.md) | High | Windows OLE | 7.8 | 0.0030 | | | [CVE-2026-26163](https://patchblox.com/security/data/cve/CVE-2026-26163.md) | High | Windows Kernel | 7.8 | 0.0030 | | | [CVE-2026-26180](https://patchblox.com/security/data/cve/CVE-2026-26180.md) | High | Windows Kernel | 7.8 | 0.0030 | | | [CVE-2026-27915](https://patchblox.com/security/data/cve/CVE-2026-27915.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0030 | | | [CVE-2026-27919](https://patchblox.com/security/data/cve/CVE-2026-27919.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0030 | | | [CVE-2026-32156](https://patchblox.com/security/data/cve/CVE-2026-32156.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.4 | 0.0029 | | | [CVE-2026-26160](https://patchblox.com/security/data/cve/CVE-2026-26160.md) | High | Windows Remote Desktop Licensing Service | 7.8 | 0.0027 | | | [CVE-2026-26159](https://patchblox.com/security/data/cve/CVE-2026-26159.md) | High | Windows Remote Desktop Licensing Service | 7.8 | 0.0026 | | | [CVE-2026-26183](https://patchblox.com/security/data/cve/CVE-2026-26183.md) | High | Windows RPC API | 7.8 | 0.0026 | | | [CVE-2026-32087](https://patchblox.com/security/data/cve/CVE-2026-32087.md) | High | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0025 | | | [CVE-2026-27917](https://patchblox.com/security/data/cve/CVE-2026-27917.md) | High | Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) | 7.0 | 0.0024 | | | [CVE-2026-27916](https://patchblox.com/security/data/cve/CVE-2026-27916.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0024 | | | [CVE-2026-27920](https://patchblox.com/security/data/cve/CVE-2026-27920.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0024 | | | [CVE-2026-26152](https://patchblox.com/security/data/cve/CVE-2026-26152.md) | High | Windows Cryptographic Services | 7.0 | 0.0023 | | | [CVE-2026-26176](https://patchblox.com/security/data/cve/CVE-2026-26176.md) | High | Windows Client Side Caching driver (csc.sys) | 7.8 | 0.0023 | | | [CVE-2026-27923](https://patchblox.com/security/data/cve/CVE-2026-27923.md) | High | Desktop Window Manager | 7.8 | 0.0023 | | | [CVE-2026-33104](https://patchblox.com/security/data/cve/CVE-2026-33104.md) | High | Windows Win32K - GRFX | 7.0 | 0.0021 | | | [CVE-2026-27910](https://patchblox.com/security/data/cve/CVE-2026-27910.md) | High | Windows Installer | 7.8 | 0.0021 | | | [CVE-2026-26177](https://patchblox.com/security/data/cve/CVE-2026-26177.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0020 | | | [CVE-2026-26182](https://patchblox.com/security/data/cve/CVE-2026-26182.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0020 | | | [CVE-2026-27922](https://patchblox.com/security/data/cve/CVE-2026-27922.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0020 | | | [CVE-2026-32082](https://patchblox.com/security/data/cve/CVE-2026-32082.md) | High | Windows SSDP Service | 7.0 | 0.0020 | | | [CVE-2026-32083](https://patchblox.com/security/data/cve/CVE-2026-32083.md) | High | Windows SSDP Service | 7.0 | 0.0020 | | | [CVE-2026-26174](https://patchblox.com/security/data/cve/CVE-2026-26174.md) | High | Windows Server Update Service | 7.0 | 0.0019 | | | [CVE-2026-27929](https://patchblox.com/security/data/cve/CVE-2026-27929.md) | High | Windows LUAFV | 7.0 | 0.0019 | | | [CVE-2026-33099](https://patchblox.com/security/data/cve/CVE-2026-33099.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-33100](https://patchblox.com/security/data/cve/CVE-2026-33100.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-32068](https://patchblox.com/security/data/cve/CVE-2026-32068.md) | High | Windows SSDP Service | 7.0 | 0.0016 | | | [CVE-2026-26173](https://patchblox.com/security/data/cve/CVE-2026-26173.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0016 | | | [CVE-2026-32086](https://patchblox.com/security/data/cve/CVE-2026-32086.md) | High | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0016 | | | [CVE-2026-32150](https://patchblox.com/security/data/cve/CVE-2026-32150.md) | High | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0016 | | | [CVE-2026-33829](https://patchblox.com/security/data/cve/CVE-2026-33829.md) | Routine | Windows Snipping Tool | 4.3 | 0.0351 | | | [CVE-2026-32151](https://patchblox.com/security/data/cve/CVE-2026-32151.md) | Routine | Windows Shell | 6.5 | 0.0075 | | | [CVE-2026-32217](https://patchblox.com/security/data/cve/CVE-2026-32217.md) | Routine | Windows Kernel | 5.5 | 0.0042 | | | [CVE-2026-27930](https://patchblox.com/security/data/cve/CVE-2026-27930.md) | Routine | Windows GDI | 5.5 | 0.0038 | | | [CVE-2026-27925](https://patchblox.com/security/data/cve/CVE-2026-27925.md) | Routine | Windows Universal Plug and Play (UPnP) Device Host | 6.5 | 0.0036 | | | [CVE-2026-32084](https://patchblox.com/security/data/cve/CVE-2026-32084.md) | Routine | Windows File Explorer | 5.5 | 0.0035 | | | [CVE-2026-32212](https://patchblox.com/security/data/cve/CVE-2026-32212.md) | Routine | Universal Plug and Play (upnp.dll) | 5.5 | 0.0031 | | | [CVE-2026-32214](https://patchblox.com/security/data/cve/CVE-2026-32214.md) | Routine | Universal Plug and Play (upnp.dll) | 5.5 | 0.0022 | | | [CVE-2026-25250](https://patchblox.com/security/data/cve/CVE-2026-25250.md) | Routine | Windows Secure Boot | 6.0 | 0.0012 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo