Microsoft patches CVE-2026-32201, exploited in wild

Microsoft's April 2026 Patch Tuesday addresses multiple vulnerabilities across Windows and Office products, including CVE-2026-32201 actively exploited in the wild.

Microsoft released its April 2026 security updates addressing multiple vulnerabilities affecting a wide range of products including Windows operating system components, Office applications, .NET Framework, Azure services, and SQL Server. The most severe vulnerabilities could allow remote code execution, potentially granting attackers the same privileges as the logged-on user. Successful exploitation could enable attackers to install programs, modify or delete data, or create new accounts with full user rights.

Microsoft has confirmed that CVE-2026-32201 is being actively exploited in the wild, elevating the urgency of this patch cycle. The affected systems span critical infrastructure components including Windows COM, SharePoint, Remote Desktop services, Active Directory, Hyper-V, and numerous kernel-level drivers and services. The breadth of affected components indicates this is a significant patch release requiring prompt attention from organizations running Microsoft environments.

Organizations should prioritize patching systems running internet-facing services and those with elevated privileges. The MS-ISAC recommends immediate deployment of updates after appropriate testing, particularly for systems vulnerable to CVE-2026-32201. Given the active exploitation and the wide attack surface presented by the affected components, this patch cycle represents a high-priority remediation effort for enterprise environments.

Source reporting: https://www.cisecurity.org/advisory/critical-patches-issued-for-microsoft-products-april-14-2026_2026-036