Microsoft · Security update · April 14, 2026

KB5082126: April 2026 security update

KB5082126, released April 14, 2026, fixes 58 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
58
3 rated Critical
Exploited
0
None reported
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.0351
89th percentile

Priority of the 58 CVEs

Patch now 0 Urgent 13 High 36 Routine 9

Applies to

Product
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-27914 Microsoft Management Console Elevation of Privilege 7.8 0.0243 More likely
Urgent CVE-2026-27909 Microsoft Windows Search Component Elevation of Privilege 7.8 0.0177 More likely
Urgent CVE-2026-27908 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege 7.0 0.0155 More likely
Urgent CVE-2026-32225 Windows Shell Security Feature Bypass 8.8 0.0120 More likely
Urgent CVE-2026-27921 Windows TCP/IP Elevation of Privilege 7.0 0.0119 More likely
Urgent CVE-2026-32093 Function Discovery Service (fdwsd.dll) Elevation of Privilege 7.0 0.0112 More likely
Urgent CVE-2026-33827 Windows TCP/IP Remote Code Execution 8.1 0.0084 Exploitation Less Likely
Urgent CVE-2026-26151 Windows Remote Desktop Spoofing 7.1 0.0083 More likely
Urgent CVE-2026-32157 Remote Desktop Client Remote Code Execution 8.8 0.0078 Exploitation Less Likely
Urgent CVE-2026-33826 Windows Active Directory Remote Code Execution 8.0 0.0054 More likely
Urgent CVE-2026-32070 Windows Common Log File System Driver Elevation of Privilege 7.0 0.0032 More likely
Urgent CVE-2026-27913 Windows BitLocker Security Feature Bypass 7.7 0.0030 More likely
Urgent CVE-2026-32075 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege 7.0 0.0027 More likely
High CVE-2026-26154 Windows Server Update Service Tampering 7.5 0.0106 Exploitation Less Likely
High CVE-2026-32183 Windows Snipping Tool Remote Code Execution 7.8 0.0062 Exploitation Less Likely
High CVE-2026-27912 Windows Kerberos Elevation of Privilege 8.0 0.0041 Exploitation Less Likely
High CVE-2026-32073 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0035 Exploitation Less Likely
High CVE-2026-32077 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege 7.8 0.0032 Exploitation Less Likely
High CVE-2026-26162 Windows OLE Elevation of Privilege 7.8 0.0030 Exploitation Less Likely
High CVE-2026-26163 Windows Kernel Elevation of Privilege 7.8 0.0030 Exploitation Less Likely
High CVE-2026-26180 Windows Kernel Elevation of Privilege 7.8 0.0030 Exploitation Less Likely
High CVE-2026-27915 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege 7.8 0.0030 Exploitation Less Likely
High CVE-2026-27919 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege 7.8 0.0030 Exploitation Less Likely
High CVE-2026-32156 Windows Universal Plug and Play (UPnP) Device Host Remote Code Execution 7.4 0.0029 Exploitation Less Likely
High CVE-2026-26160 Windows Remote Desktop Licensing Service Elevation of Privilege 7.8 0.0027 Exploitation Less Likely
Showing 1 to 25 of 58 1Next