Microsoft's April 2026 Patch Tuesday Addresses 165 Vulnerabilities, Including Actively Exploited SharePoint Zero-Day

Microsoft released its April 2026 Patch Tuesday security updates, addressing 165 vulnerabilities, including an actively exploited zero-day in SharePoint. The critical flaw, tracked as CVE-2026-32201, was among the fixed issues, marking one of the largest Patch Tuesday updates by CVE count. The update targeted vulnerabilities across Microsoft products, with the SharePoint zero-day being a notable priority due to its active exploitation. No additional technical details about the exploit or attack vectors were provided in the notice. The fixes were issued as part of Microsoft’s routine monthly security patch cycle.