Microsoft · Security update · April 14, 2026
KB5082198: April 2026 cumulative update for Windows 10 1607
KB5082198, released April 14, 2026, fixes 84 CVEs across 4 products. One of them is being exploited (CVE-2026-33824); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
84
4 rated Critical
Exploited
1
CVE-2026-33824
Exploitation more likely
14
Vendor assessment
Highest EPSS
0.7705
99th percentile
Priority of the 84 CVEs
Patch now 1
Urgent 16
High 50
Routine 17
Applies to
| Product | Build after install |
|---|---|
| Windows 10 Version 1607 for 32-bit Systems | 14393.9060 |
| Windows 10 Version 1607 for x64-based Systems | 14393.9060 |
| Windows Server 2016 | 14393.9060 |
| Windows Server 2016 (Server Core installation) | 14393.9060 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2026-33824 | Windows IKE Extension | Remote Code Execution | 9.8 | 0.7705 | KEVExploited |
| Urgent | CVE-2026-27914 | Microsoft Management Console | Elevation of Privilege | 7.8 | 0.0243 | More likely |
| Urgent | CVE-2026-26169 | Windows Kernel Memory | Information Disclosure | 6.1 | 0.0231 | More likely |
| Urgent | CVE-2026-27909 | Microsoft Windows Search Component | Elevation of Privilege | 7.8 | 0.0177 | More likely |
| Urgent | CVE-2026-27908 | Windows TDI Translation Driver (tdx.sys) | Elevation of Privilege | 7.0 | 0.0155 | More likely |
| Urgent | CVE-2026-32225 | Windows Shell | Security Feature Bypass | 8.8 | 0.0120 | More likely |
| Urgent | CVE-2026-27921 | Windows TCP/IP | Elevation of Privilege | 7.0 | 0.0119 | More likely |
| Urgent | CVE-2026-32093 | Function Discovery Service (fdwsd.dll) | Elevation of Privilege | 7.0 | 0.0112 | More likely |
| Urgent | CVE-2026-33827 | Windows TCP/IP | Remote Code Execution | 8.1 | 0.0084 | Exploitation Less Likely |
| Urgent | CVE-2026-26151 | Windows Remote Desktop | Spoofing | 7.1 | 0.0083 | More likely |
| Urgent | CVE-2026-32157 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0078 | Exploitation Less Likely |
| Urgent | CVE-2026-33826 | Windows Active Directory | Remote Code Execution | 8.0 | 0.0054 | More likely |
| Urgent | CVE-2026-32154 | Desktop Window Manager | Elevation of Privilege | 7.8 | 0.0038 | More likely |
| Urgent | CVE-2026-32070 | Windows Common Log File System Driver | Elevation of Privilege | 7.0 | 0.0032 | More likely |
| Urgent | CVE-2026-0390 | Windows Boot Loader | Security Feature Bypass | 6.7 | 0.0032 | More likely |
| Urgent | CVE-2026-27913 | Windows BitLocker | Security Feature Bypass | 7.7 | 0.0030 | More likely |
| Urgent | CVE-2026-32075 | Windows Universal Plug and Play (UPnP) Device Host | Elevation of Privilege | 7.0 | 0.0027 | More likely |
| High | CVE-2026-26154 | Windows Server Update Service | Tampering | 7.5 | 0.0106 | Exploitation Less Likely |
| High | CVE-2026-32071 | Windows Local Security Authority Subsystem Service (LSASS) | Denial of Service | 7.5 | 0.0106 | Exploitation Less Likely |
| High | CVE-2026-32183 | Windows Snipping Tool | Remote Code Execution | 7.8 | 0.0062 | Exploitation Less Likely |
| High | CVE-2026-26178 | Windows Advanced Rasterization Platform | Elevation of Privilege | 8.8 | 0.0042 | Exploitation Less Likely |
| High | CVE-2026-26156 | Role: Windows Hyper-V | Remote Code Execution | 7.8 | 0.0041 | Exploitation Less Likely |
| High | CVE-2026-27912 | Windows Kerberos | Elevation of Privilege | 8.0 | 0.0041 | Exploitation Less Likely |
| High | CVE-2026-27928 | Windows Hello | Security Feature Bypass | 8.7 | 0.0041 | Exploitation Less Likely |
| High | CVE-2026-32073 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0035 | Exploitation Less Likely |
Showing 1 to 25 of 84
1Next