# KB5082198: April 2026 cumulative update for Windows 10 1607 KB5082198, released April 14, 2026, fixes 84 CVEs across 4 products. One of them is being exploited (CVE-2026-33824); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5082198 - Platform: Microsoft - Released: Apr 14, 2026 - Priority: Patch now (Closes CVE-2026-33824, exploited (CISA KEV)) - CVEs: 84, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5082198 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-32-bit-systems.md) | | 14393.9060 | | [Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-x64-based-systems.md) | | 14393.9060 | | [Windows Server 2016](https://patchblox.com/security/data/product/microsoft/windows-server-2016.md) | | 14393.9060 | | [Windows Server 2016 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2016-server-core-installation.md) | | 14393.9060 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-33824](https://patchblox.com/security/data/cve/CVE-2026-33824.md) | Patch now | Windows IKE Extension | 9.8 | 0.7705 | CISA KEV | | [CVE-2026-27914](https://patchblox.com/security/data/cve/CVE-2026-27914.md) | Urgent | Microsoft Management Console | 7.8 | 0.0243 | More likely | | [CVE-2026-26169](https://patchblox.com/security/data/cve/CVE-2026-26169.md) | Urgent | Windows Kernel Memory | 6.1 | 0.0231 | More likely | | [CVE-2026-27909](https://patchblox.com/security/data/cve/CVE-2026-27909.md) | Urgent | Microsoft Windows Search Component | 7.8 | 0.0177 | More likely | | [CVE-2026-27908](https://patchblox.com/security/data/cve/CVE-2026-27908.md) | Urgent | Windows TDI Translation Driver (tdx.sys) | 7.0 | 0.0155 | More likely | | [CVE-2026-32225](https://patchblox.com/security/data/cve/CVE-2026-32225.md) | Urgent | Windows Shell | 8.8 | 0.0120 | More likely | | [CVE-2026-27921](https://patchblox.com/security/data/cve/CVE-2026-27921.md) | Urgent | Windows TCP/IP | 7.0 | 0.0119 | More likely | | [CVE-2026-32093](https://patchblox.com/security/data/cve/CVE-2026-32093.md) | Urgent | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0112 | More likely | | [CVE-2026-33827](https://patchblox.com/security/data/cve/CVE-2026-33827.md) | Urgent | Windows TCP/IP | 8.1 | 0.0084 | | | [CVE-2026-26151](https://patchblox.com/security/data/cve/CVE-2026-26151.md) | Urgent | Windows Remote Desktop | 7.1 | 0.0083 | More likely | | [CVE-2026-32157](https://patchblox.com/security/data/cve/CVE-2026-32157.md) | Urgent | Remote Desktop Client | 8.8 | 0.0078 | | | [CVE-2026-33826](https://patchblox.com/security/data/cve/CVE-2026-33826.md) | Urgent | Windows Active Directory | 8.0 | 0.0054 | More likely | | [CVE-2026-32154](https://patchblox.com/security/data/cve/CVE-2026-32154.md) | Urgent | Desktop Window Manager | 7.8 | 0.0038 | More likely | | [CVE-2026-32070](https://patchblox.com/security/data/cve/CVE-2026-32070.md) | Urgent | Windows Common Log File System Driver | 7.0 | 0.0032 | More likely | | [CVE-2026-0390](https://patchblox.com/security/data/cve/CVE-2026-0390.md) | Urgent | Windows Boot Loader | 6.7 | 0.0032 | More likely | | [CVE-2026-27913](https://patchblox.com/security/data/cve/CVE-2026-27913.md) | Urgent | Windows BitLocker | 7.7 | 0.0030 | More likely | | [CVE-2026-32075](https://patchblox.com/security/data/cve/CVE-2026-32075.md) | Urgent | Windows Universal Plug and Play (UPnP) Device Host | 7.0 | 0.0027 | More likely | | [CVE-2026-26154](https://patchblox.com/security/data/cve/CVE-2026-26154.md) | High | Windows Server Update Service | 7.5 | 0.0106 | | | [CVE-2026-32071](https://patchblox.com/security/data/cve/CVE-2026-32071.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 7.5 | 0.0106 | | | [CVE-2026-32183](https://patchblox.com/security/data/cve/CVE-2026-32183.md) | High | Windows Snipping Tool | 7.8 | 0.0062 | | | [CVE-2026-26178](https://patchblox.com/security/data/cve/CVE-2026-26178.md) | High | Windows Advanced Rasterization Platform | 8.8 | 0.0042 | | | [CVE-2026-26156](https://patchblox.com/security/data/cve/CVE-2026-26156.md) | High | Role: Windows Hyper-V | 7.8 | 0.0041 | | | [CVE-2026-27912](https://patchblox.com/security/data/cve/CVE-2026-27912.md) | High | Windows Kerberos | 8.0 | 0.0041 | | | [CVE-2026-27928](https://patchblox.com/security/data/cve/CVE-2026-27928.md) | High | Windows Hello | 8.7 | 0.0041 | | | [CVE-2026-32073](https://patchblox.com/security/data/cve/CVE-2026-32073.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0035 | | | [CVE-2026-32077](https://patchblox.com/security/data/cve/CVE-2026-32077.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0032 | | | [CVE-2026-32149](https://patchblox.com/security/data/cve/CVE-2026-32149.md) | High | Role: Windows Hyper-V | 7.3 | 0.0032 | | | [CVE-2026-33098](https://patchblox.com/security/data/cve/CVE-2026-33098.md) | High | Windows Container Isolation FS Filter Driver | 7.8 | 0.0031 | | | [CVE-2026-26162](https://patchblox.com/security/data/cve/CVE-2026-26162.md) | High | Windows OLE | 7.8 | 0.0030 | | | [CVE-2026-26163](https://patchblox.com/security/data/cve/CVE-2026-26163.md) | High | Windows Kernel | 7.8 | 0.0030 | | | [CVE-2026-26180](https://patchblox.com/security/data/cve/CVE-2026-26180.md) | High | Windows Kernel | 7.8 | 0.0030 | | | [CVE-2026-27915](https://patchblox.com/security/data/cve/CVE-2026-27915.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0030 | | | [CVE-2026-27919](https://patchblox.com/security/data/cve/CVE-2026-27919.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0030 | | | [CVE-2026-32156](https://patchblox.com/security/data/cve/CVE-2026-32156.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.4 | 0.0029 | | | [CVE-2026-26160](https://patchblox.com/security/data/cve/CVE-2026-26160.md) | High | Windows Remote Desktop Licensing Service | 7.8 | 0.0027 | | | [CVE-2026-26159](https://patchblox.com/security/data/cve/CVE-2026-26159.md) | High | Windows Remote Desktop Licensing Service | 7.8 | 0.0026 | | | [CVE-2026-26183](https://patchblox.com/security/data/cve/CVE-2026-26183.md) | High | Windows RPC API | 7.8 | 0.0026 | | | [CVE-2026-32087](https://patchblox.com/security/data/cve/CVE-2026-32087.md) | High | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0025 | | | [CVE-2026-32089](https://patchblox.com/security/data/cve/CVE-2026-32089.md) | High | Windows Speech Brokered Api | 7.8 | 0.0025 | | | [CVE-2026-27917](https://patchblox.com/security/data/cve/CVE-2026-27917.md) | High | Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) | 7.0 | 0.0024 | | | [CVE-2026-27916](https://patchblox.com/security/data/cve/CVE-2026-27916.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0024 | | | [CVE-2026-27920](https://patchblox.com/security/data/cve/CVE-2026-27920.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.8 | 0.0024 | | | [CVE-2026-26152](https://patchblox.com/security/data/cve/CVE-2026-26152.md) | High | Windows Cryptographic Services | 7.0 | 0.0023 | | | [CVE-2026-26170](https://patchblox.com/security/data/cve/CVE-2026-26170.md) | High | Microsoft PowerShell | 7.8 | 0.0023 | | | [CVE-2026-26176](https://patchblox.com/security/data/cve/CVE-2026-26176.md) | High | Windows Client Side Caching driver (csc.sys) | 7.8 | 0.0023 | | | [CVE-2026-27923](https://patchblox.com/security/data/cve/CVE-2026-27923.md) | High | Desktop Window Manager | 7.8 | 0.0023 | | | [CVE-2026-32080](https://patchblox.com/security/data/cve/CVE-2026-32080.md) | High | Windows WalletService | 7.0 | 0.0021 | | | [CVE-2026-33104](https://patchblox.com/security/data/cve/CVE-2026-33104.md) | High | Windows Win32K - GRFX | 7.0 | 0.0021 | | | [CVE-2026-27910](https://patchblox.com/security/data/cve/CVE-2026-27910.md) | High | Windows Installer | 7.8 | 0.0021 | | | [CVE-2026-32090](https://patchblox.com/security/data/cve/CVE-2026-32090.md) | High | Windows Speech Brokered Api | 7.8 | 0.0021 | | | [CVE-2026-26177](https://patchblox.com/security/data/cve/CVE-2026-26177.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0020 | | | [CVE-2026-26182](https://patchblox.com/security/data/cve/CVE-2026-26182.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0020 | | | [CVE-2026-27922](https://patchblox.com/security/data/cve/CVE-2026-27922.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0020 | | | [CVE-2026-32082](https://patchblox.com/security/data/cve/CVE-2026-32082.md) | High | Windows SSDP Service | 7.0 | 0.0020 | | | [CVE-2026-32083](https://patchblox.com/security/data/cve/CVE-2026-32083.md) | High | Windows SSDP Service | 7.0 | 0.0020 | | | [CVE-2026-26174](https://patchblox.com/security/data/cve/CVE-2026-26174.md) | High | Windows Server Update Service | 7.0 | 0.0019 | | | [CVE-2026-27929](https://patchblox.com/security/data/cve/CVE-2026-27929.md) | High | Windows LUAFV | 7.0 | 0.0019 | | | [CVE-2026-26167](https://patchblox.com/security/data/cve/CVE-2026-26167.md) | High | Windows Push Notifications | 8.8 | 0.0018 | | | [CVE-2026-33099](https://patchblox.com/security/data/cve/CVE-2026-33099.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-33100](https://patchblox.com/security/data/cve/CVE-2026-33100.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0018 | | | [CVE-2026-32164](https://patchblox.com/security/data/cve/CVE-2026-32164.md) | High | Windows User Interface Core | 7.8 | 0.0016 | | | [CVE-2026-32068](https://patchblox.com/security/data/cve/CVE-2026-32068.md) | High | Windows SSDP Service | 7.0 | 0.0016 | | | [CVE-2026-26173](https://patchblox.com/security/data/cve/CVE-2026-26173.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0016 | | | [CVE-2026-32086](https://patchblox.com/security/data/cve/CVE-2026-32086.md) | High | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0016 | | | [CVE-2026-32150](https://patchblox.com/security/data/cve/CVE-2026-32150.md) | High | Function Discovery Service (fdwsd.dll) | 7.0 | 0.0016 | | | [CVE-2026-32091](https://patchblox.com/security/data/cve/CVE-2026-32091.md) | High | Microsoft Brokering File System | 8.4 | 0.0016 | | | [CVE-2026-27911](https://patchblox.com/security/data/cve/CVE-2026-27911.md) | High | Windows User Interface Core | 7.8 | 0.0015 | | | [CVE-2026-33829](https://patchblox.com/security/data/cve/CVE-2026-33829.md) | Routine | Windows Snipping Tool | 4.3 | 0.0351 | | | [CVE-2026-26155](https://patchblox.com/security/data/cve/CVE-2026-26155.md) | Routine | Windows Local Security Authority Subsystem Service (LSASS) | 6.5 | 0.0089 | | | [CVE-2026-32151](https://patchblox.com/security/data/cve/CVE-2026-32151.md) | Routine | Windows Shell | 6.5 | 0.0075 | | | [CVE-2026-32085](https://patchblox.com/security/data/cve/CVE-2026-32085.md) | Routine | Windows Remote Procedure Call | 5.5 | 0.0044 | | | [CVE-2026-20928](https://patchblox.com/security/data/cve/CVE-2026-20928.md) | Routine | Windows Recovery Environment Agent | 4.6 | 0.0043 | | | [CVE-2026-32081](https://patchblox.com/security/data/cve/CVE-2026-32081.md) | Routine | Windows File Explorer | 5.5 | 0.0042 | | | [CVE-2026-32217](https://patchblox.com/security/data/cve/CVE-2026-32217.md) | Routine | Windows Kernel | 5.5 | 0.0042 | | | [CVE-2026-26175](https://patchblox.com/security/data/cve/CVE-2026-26175.md) | Routine | Windows Boot Manager | 4.6 | 0.0040 | | | [CVE-2026-27930](https://patchblox.com/security/data/cve/CVE-2026-27930.md) | Routine | Windows GDI | 5.5 | 0.0038 | | | [CVE-2026-27925](https://patchblox.com/security/data/cve/CVE-2026-27925.md) | Routine | Windows Universal Plug and Play (UPnP) Device Host | 6.5 | 0.0036 | | | [CVE-2026-32084](https://patchblox.com/security/data/cve/CVE-2026-32084.md) | Routine | Windows File Explorer | 5.5 | 0.0035 | | | [CVE-2026-32079](https://patchblox.com/security/data/cve/CVE-2026-32079.md) | Routine | Windows File Explorer | 5.5 | 0.0034 | | | [CVE-2026-32212](https://patchblox.com/security/data/cve/CVE-2026-32212.md) | Routine | Universal Plug and Play (upnp.dll) | 5.5 | 0.0031 | | | [CVE-2026-32072](https://patchblox.com/security/data/cve/CVE-2026-32072.md) | Routine | Windows Active Directory | 6.2 | 0.0029 | | | [CVE-2026-23670](https://patchblox.com/security/data/cve/CVE-2026-23670.md) | Routine | Windows Virtualization-Based Security (VBS) Enclave | 5.7 | 0.0027 | | | [CVE-2026-32214](https://patchblox.com/security/data/cve/CVE-2026-32214.md) | Routine | Universal Plug and Play (upnp.dll) | 5.5 | 0.0022 | | | [CVE-2026-25250](https://patchblox.com/security/data/cve/CVE-2026-25250.md) | Routine | Windows Secure Boot | 6.0 | 0.0012 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo