Microsoft · ServicingStack update · April 14, 2026

KB5082060: April 2026 cumulative update for Windows Server 23H2

KB5082060, released April 14, 2026, fixes 118 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.2274). One of them is being exploited (CVE-2026-33824); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

118

4 rated Critical

Exploited

CVE-2026-33824

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.7738

99th percentile

Priority of the 118 CVEs

Patch now 1
                                Urgent 17
                                High 77
                                Routine 23

Applies to

Product	Build after install
Windows Server 2022, 23H2 Edition (Server Core installation)	25398.2274

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2026-33824	Windows IKE Extension	Remote Code Execution	9.8	0.7738	KEVExploited
Urgent	CVE-2026-27914	Microsoft Management Console	Elevation of Privilege	7.8	0.0253	More likely
Urgent	CVE-2026-26169	Windows Kernel Memory	Information Disclosure	6.1	0.0240	More likely
Urgent	CVE-2026-32162	Windows COM	Elevation of Privilege	8.4	0.0195	More likely
Urgent	CVE-2026-27909	Microsoft Windows Search Component	Elevation of Privilege	7.8	0.0184	More likely
Urgent	CVE-2026-27908	Windows TDI Translation Driver (tdx.sys)	Elevation of Privilege	7.0	0.0161	More likely
Urgent	CVE-2026-32225	Windows Shell	Security Feature Bypass	8.8	0.0124	More likely
Urgent	CVE-2026-27921	Windows TCP/IP	Elevation of Privilege	7.0	0.0124	More likely
Urgent	CVE-2026-32093	Function Discovery Service (fdwsd.dll)	Elevation of Privilege	7.0	0.0116	More likely
Urgent	CVE-2026-26151	Windows Remote Desktop	Spoofing	7.1	0.0086	More likely
Urgent	CVE-2026-33827	Windows TCP/IP	Remote Code Execution	8.1	0.0085	Exploitation Less Likely
Urgent	CVE-2026-32157	Remote Desktop Client	Remote Code Execution	8.8	0.0081	Exploitation Less Likely
Urgent	CVE-2026-33826	Windows Active Directory	Remote Code Execution	8.0	0.0056	More likely
Urgent	CVE-2026-32152	Desktop Window Manager	Elevation of Privilege	7.8	0.0048	More likely
Urgent	CVE-2026-32154	Desktop Window Manager	Elevation of Privilege	7.8	0.0040	More likely
Urgent	CVE-2026-32070	Windows Common Log File System Driver	Elevation of Privilege	7.0	0.0033	More likely
Urgent	CVE-2026-27913	Windows BitLocker	Security Feature Bypass	7.7	0.0031	More likely
Urgent	CVE-2026-32075	Windows Universal Plug and Play (UPnP) Device Host	Elevation of Privilege	7.0	0.0028	More likely
High	CVE-2026-33096	Windows HTTP.sys	Denial of Service	7.5	0.0130	Exploitation Less Likely
High	CVE-2026-26154	Windows Server Update Service	Tampering	7.5	0.0111	Exploitation Less Likely
High	CVE-2026-32071	Windows Local Security Authority Subsystem Service (LSASS)	Denial of Service	7.5	0.0110	Exploitation Less Likely
High	CVE-2026-32183	Windows Snipping Tool	Remote Code Execution	7.8	0.0064	Exploitation Less Likely
High	CVE-2026-27912	Windows Kerberos	Elevation of Privilege	8.0	0.0059	Exploitation Less Likely
High	CVE-2026-26179	Windows Kernel	Elevation of Privilege	7.8	0.0046	Exploitation Less Likely
High	CVE-2026-26178	Windows Advanced Rasterization Platform	Elevation of Privilege	8.8	0.0043	Exploitation Less Likely

Released the same day

KB5002808
Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)
KB5002853
Microsoft SharePoint Server Subscription Edition
KB5002854
Microsoft SharePoint Server 2019
KB5002855
Office Online Server
KB5002856
Microsoft SharePoint Server 2019
KB5002859
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002860
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002861
Microsoft SharePoint Enterprise Server 2016
KB5002862
Microsoft SharePoint Enterprise Server 2016
KB5082052
Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems
KB5082063
Windows Server 2025, Windows Server 2025 (Server Core installation)
KB5082123
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more

Vendor advisory

https://support.microsoft.com/help/5082060

Our write-up

April 2026 Patch Tuesday: 163 CVEs, Two Zero-Days, and a Server Update That Broke Domain Controllers

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5082060">KB5082060 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.