# Security updates released in April 2026 - Web page: https://patchblox.com/security/patch-radar/2026/04 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 53 | 149 | 12 | 12 | | Linux | 3,847 | 1,689 | 20 | 20 | ## Patch Tuesday, April 14, 2026 176 CVEs, 7 Critical, 2 exploited, 1 publicly disclosed, in 50 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 125 | 1 | 1 | | Windows 11 | 122 | 1 | 1 | | Windows 10 | 104 | 1 | 1 | | .NET and Visual Studio | 7 | 0 | 0 | | Microsoft Office | 7 | 0 | 0 | | SQL Server | 3 | 0 | 0 | | SharePoint Server | 2 | 1 | 1 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5082063](https://patchblox.com/security/data/fix/microsoft/kb5082063.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | Apr 14, 2026 | Patch now | 121 | 1 | CVE-2026-33824 | | [KB5082060](https://patchblox.com/security/data/fix/microsoft/kb5082060.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Apr 14, 2026 | Patch now | 118 | 1 | CVE-2026-33824 | | [KB5083769](https://patchblox.com/security/data/fix/microsoft/kb5083769.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | Apr 14, 2026 | Patch now | 118 | 1 | CVE-2026-33824 | | [KB5083768](https://patchblox.com/security/data/fix/microsoft/kb5083768.md) | Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems | Apr 14, 2026 | Patch now | 116 | 1 | CVE-2026-33824 | | [KB5082142](https://patchblox.com/security/data/fix/microsoft/kb5082142.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Apr 14, 2026 | Patch now | 113 | 1 | CVE-2026-33824 | | [KB5082052](https://patchblox.com/security/data/fix/microsoft/kb5082052.md) | Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems | Apr 14, 2026 | Patch now | 112 | 1 | CVE-2026-33824 | | [KB5082123](https://patchblox.com/security/data/fix/microsoft/kb5082123.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Apr 14, 2026 | Patch now | 104 | 1 | CVE-2026-33824 | | [KB5082200](https://patchblox.com/security/data/fix/microsoft/kb5082200.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Apr 14, 2026 | Patch now | 104 | 1 | CVE-2026-33824 | | [KB5082198](https://patchblox.com/security/data/fix/microsoft/kb5082198.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Apr 14, 2026 | Patch now | 84 | 1 | CVE-2026-33824 | | [KB5002853](https://patchblox.com/security/data/fix/microsoft/kb5002853.md) | Microsoft SharePoint Server Subscription Edition | Apr 14, 2026 | Patch now | 2 | 1 | CVE-2026-32201 | | [KB5002854](https://patchblox.com/security/data/fix/microsoft/kb5002854.md) | Microsoft SharePoint Server 2019 | Apr 14, 2026 | Patch now | 2 | 1 | CVE-2026-32201 | | [KB5002861](https://patchblox.com/security/data/fix/microsoft/kb5002861.md) | Microsoft SharePoint Enterprise Server 2016 | Apr 14, 2026 | Patch now | 2 | 1 | CVE-2026-32201 | | [KB5082126](https://patchblox.com/security/data/fix/microsoft/kb5082126.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Apr 14, 2026 | Urgent | 58 | 0 | CVE-2026-27914 | | [KB5082127](https://patchblox.com/security/data/fix/microsoft/kb5082127.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Apr 14, 2026 | Urgent | 55 | 0 | CVE-2026-27914 | | [KB5082398](https://patchblox.com/security/data/fix/microsoft/kb5082398.md) | Microsoft .NET Framework 3.5 on Windows Server 2012, Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 3.5 on Windows Server 2012 R2 and 1 more | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082400](https://patchblox.com/security/data/fix/microsoft/kb5082400.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082402](https://patchblox.com/security/data/fix/microsoft/kb5082402.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082403](https://patchblox.com/security/data/fix/microsoft/kb5082403.md) | Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012 R2 and 1 more | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082411](https://patchblox.com/security/data/fix/microsoft/kb5082411.md) | Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082413](https://patchblox.com/security/data/fix/microsoft/kb5082413.md) | Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems and 3 more | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082414](https://patchblox.com/security/data/fix/microsoft/kb5082414.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082417](https://patchblox.com/security/data/fix/microsoft/kb5082417.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 and 1 more | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082418](https://patchblox.com/security/data/fix/microsoft/kb5082418.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation) | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082419](https://patchblox.com/security/data/fix/microsoft/kb5082419.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems and 6 more | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082420](https://patchblox.com/security/data/fix/microsoft/kb5082420.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082421](https://patchblox.com/security/data/fix/microsoft/kb5082421.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1 for x64-based Systems | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082424](https://patchblox.com/security/data/fix/microsoft/kb5082424.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems and 2 more | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082425](https://patchblox.com/security/data/fix/microsoft/kb5082425.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation), Microsoft .NET Framework 4.8.1 on Windows Server 2022 (Server Core installation) | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082426](https://patchblox.com/security/data/fix/microsoft/kb5082426.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems and 6 more | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082427](https://patchblox.com/security/data/fix/microsoft/kb5082427.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) | Apr 14, 2026 | Urgent | 3 | 0 | CVE-2026-23666 | | [KB5082404](https://patchblox.com/security/data/fix/microsoft/kb5082404.md) | Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) | Apr 15, 2026 | Urgent | 2 | 0 | CVE-2026-23666 | | [KB5082406](https://patchblox.com/security/data/fix/microsoft/kb5082406.md) | Microsoft .NET Framework 3.5 on Windows Server 2012 R2, Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) | Apr 15, 2026 | Urgent | 2 | 0 | CVE-2026-23666 | | [KB5002859](https://patchblox.com/security/data/fix/microsoft/kb5002859.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Apr 14, 2026 | Urgent | 1 | 0 | CVE-2026-32190 | | [KB5091596](https://patchblox.com/security/data/fix/microsoft/kb5091596.md) | ASP.NET Core 10.0 | Apr 21, 2026 | High | 1 | 0 | CVE-2026-40372 | | [KB5086095](https://patchblox.com/security/data/fix/microsoft/kb5086095.md) | .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows | Apr 14, 2026 | High | 4 | 0 | CVE-2026-32178 | | [KB5086096](https://patchblox.com/security/data/fix/microsoft/kb5086096.md) | .NET 8.0, .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS and 1 more | Apr 14, 2026 | High | 4 | 0 | CVE-2026-32178 | | [KB5086097](https://patchblox.com/security/data/fix/microsoft/kb5086097.md) | .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows | Apr 14, 2026 | High | 4 | 0 | CVE-2026-32178 | | [KB5084815](https://patchblox.com/security/data/fix/microsoft/kb5084815.md) | Microsoft SQL Server 2022 for x64-based Systems (GDR) | Apr 14, 2026 | High | 3 | 0 | CVE-2026-33120 | | [KB5002855](https://patchblox.com/security/data/fix/microsoft/kb5002855.md) | Office Online Server | Apr 14, 2026 | High | 5 | 0 | CVE-2026-32188 | | [KB5002860](https://patchblox.com/security/data/fix/microsoft/kb5002860.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Apr 14, 2026 | High | 5 | 0 | CVE-2026-32188 | | [KB5002808](https://patchblox.com/security/data/fix/microsoft/kb5002808.md) | Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition) | Apr 14, 2026 | High | 1 | 0 | CVE-2026-32200 | | [KB5082806](https://patchblox.com/security/data/fix/microsoft/kb5082806.md) | Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2 and 1 more | Apr 14, 2026 | High | 1 | 0 | CVE-2026-32077 | | [KB5002856](https://patchblox.com/security/data/fix/microsoft/kb5002856.md) | Microsoft SharePoint Server 2019 | Apr 14, 2026 | Routine | 1 | 0 | CVE-2026-20945 | | [KB5002862](https://patchblox.com/security/data/fix/microsoft/kb5002862.md) | Microsoft SharePoint Enterprise Server 2016 | Apr 14, 2026 | Routine | 1 | 0 | CVE-2026-20945 | | [KB5083245](https://patchblox.com/security/data/fix/microsoft/kb5083245.md) | Microsoft SQL Server 2025 for x64-based Systems (CU3) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5083252](https://patchblox.com/security/data/fix/microsoft/kb5083252.md) | Microsoft SQL Server 2022 for x64-based Systems (CU 24) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5084814](https://patchblox.com/security/data/fix/microsoft/kb5084814.md) | Microsoft SQL Server 2025 for x64-based Systems (GDR) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5084816](https://patchblox.com/security/data/fix/microsoft/kb5084816.md) | Microsoft SQL Server 2019 for x64-based Systems (CU 32) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5084817](https://patchblox.com/security/data/fix/microsoft/kb5084817.md) | Microsoft SQL Server 2019 for x64-based Systems (GDR) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5084818](https://patchblox.com/security/data/fix/microsoft/kb5084818.md) | Microsoft SQL Server 2017 for x64-based Systems (CU 31) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5084819](https://patchblox.com/security/data/fix/microsoft/kb5084819.md) | Microsoft SQL Server 2017 for x64-based Systems (GDR) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5084820](https://patchblox.com/security/data/fix/microsoft/kb5084820.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | | [KB5084821](https://patchblox.com/security/data/fix/microsoft/kb5084821.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) | Apr 14, 2026 | Routine | 2 | 0 | CVE-2026-32167 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Ubuntu | 2,224 | 266 | 0 | 0 | | Debian | 576 | 576 | 1 | 1 | | Red Hat | 238 | 348 | 5 | 5 | | sles | 177 | 324 | 5 | 5 | | ol | 171 | 352 | 3 | 3 | | rocky | 126 | 239 | 0 | 0 | | almalinux | 119 | 236 | 1 | 1 | | amzn | 100 | 508 | 0 | 0 | | opensuse-leap | 87 | 345 | 5 | 5 | | Fedora | 29 | 90 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [SUSE-SU-2026:1604-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1604-1.md) | tomcat on sles 15.6, sles 15.7 | Apr 24, 2026 | Patch now | 11 | 1 | CVE-2026-34486 | | [SUSE-SU-2026:1603-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1603-1.md) | tomcat10 on sles 15.6, sles 15.7 | Apr 24, 2026 | Patch now | 11 | 1 | CVE-2026-34486 | | [SUSE-SU-2026:1558-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1558-1.md) | tomcat11 on sles 15.6, sles 15.7 | Apr 22, 2026 | Patch now | 11 | 1 | CVE-2026-34486 | | [OPENSUSE-SU-2026:20611-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20611-1.md) | tomcat on opensuse-leap 16.0 | Apr 22, 2026 | Patch now | 10 | 1 | CVE-2026-34486 | | [OPENSUSE-SU-2026:20612-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20612-1.md) | tomcat10 on opensuse-leap 16.0 | Apr 22, 2026 | Patch now | 10 | 1 | CVE-2026-34486 | | [OPENSUSE-SU-2026:20595-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20595-1.md) | tomcat11 on opensuse-leap 16.0 | Apr 21, 2026 | Patch now | 10 | 1 | CVE-2026-34486 | | [RHSA-2026:36787](https://patchblox.com/security/data/fix/linux/rhsa-2026-36787.md) | tomcat on RHEL 10 | Apr 9, 2026 | Patch now | 2 | 1 | CVE-2026-34486 | | [RHSA-2026:36789](https://patchblox.com/security/data/fix/linux/rhsa-2026-36789.md) | tomcat9 on RHEL 10 | Apr 9, 2026 | Patch now | 2 | 1 | CVE-2026-34486 | | [RHSA-2026:17690](https://patchblox.com/security/data/fix/linux/rhsa-2026-17690.md) | firefox on RHEL 10 | Apr 30, 2026 | Patch now | 26 | 1 | CVE-2026-111497 | | [RHSA-2026:10766](https://patchblox.com/security/data/fix/linux/rhsa-2026-10766.md) | firefox on RHEL 8 | Apr 30, 2026 | Patch now | 26 | 1 | CVE-2026-111497 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo