April 2026 Monthly Patch

Back Csa.Sg

April 2026 Monthly Patch

Csa.Sg • April 15, 2026

Share: View original

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

Microsoft has released security patches to address multiple vulnerabilities in their software and products. The vulnerabilities that have been classified as Critical in severity are listed in the table below. For the full list of security patches released by Microsoft, please refer to

CRITICAL VULNERABILITIES

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Missing bound checks can lead to memory corruption in safe Go in cmd/compile

Code execution vulnerability in SWIG code generation in cmd/go

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Windows Active Directory Remote Code Execution Vulnerability

.NET Framework Denial of Service Vulnerability

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BlueHammer Zero-Day Exploit Released, Exposing Windows Users to Privilege Escalation A security researcher, known as Chaotic Eclipse, has publicly released exploit code for a zero-day vulnerability in Windows, dubbed BlueHammer, allowing local privilege escalation to SYSTEM or elevated administrator privileges. The exploit targets a flaw in the Windows Defender update mechanism and has no available patch, leaving potentially over 1 billion Windows users vulnerable. The researcher expressed frustration with Microsoft's Security Response Center (MSRC) regarding their handling of the vulnerability disclosure process, leading to the public release of the exploit. Will Dormann, a principal vulnerability analyst, confirmed the exploit's functionality, noting that it is not entirely reliable and primarily affects local user accounts. The exploit code is available on GitHub, with significant interest from both security researchers and potential attackers. Microsoft has not yet issued a statement regarding a patch or a timeline for addressing the vulnerability. The exploit's release has raised concerns about the implications for cybersecurity, as attackers could leverage this flaw for malicious purposes. 130 sources 67

Extracted Entities

Attack Types (2)

Denial of Service Remote Code Execution

Platforms (3)

Microsoft Office Microsoft Word Windows

Tools (1)