Posting Date: 2026/04/29
【Vulnerability Alert】Microsoft Released April 2026 Security Updates
- Subject: 【Vulnerability Alert】Microsoft Released April 2026 Security Updates
- Description:
- Forwarded from National Information Security Analysis Center (NISAC) Security Alert NISAC-200-202604-00000009.
- Microsoft has released security updates for April 2026, patching a total of 165 vulnerabilities. This includes 8 high-risk vulnerabilities and 1 vulnerability that has already been exploited. Please verify and perform patching as soon as possible.
- Affected Platforms:
- Affected Platforms - Systems:
- Azure Logic Apps
- Microsoft Power App
- Remote Desktop Client
- SQL Server
- .NET
- .NET Framework
- .NET and Visual Studio
- .NET, .NET Framework, Visual Studio
- Applocker Filter Driver (applockerfltr.sys)
- Azure Monitor Agent
- Desktop Window Manager
- Function Discovery Service (fdwsd.dll)
- GitHub Copilot and Visual Studio Code
- Affected Platforms - Software:
- Windows Advanced Rasterization Platform
- Windows IKE Extension
- Windows Push Notifications
- Windows Shell
- Microsoft Brokering File System
- Microsoft Defender
- Microsoft Dynamics 365 (on-premises)
- Microsoft Edge (Chromium-based)
- Microsoft Graphics Component
- Microsoft High Performance Compute Pack (HPC)
- Microsoft Management Console
- Microsoft Office
- Microsoft Office Excel
- Microsoft Office PowerPoint
- Microsoft Office SharePoint
- Microsoft Office Word
- Microsoft PowerShell
- Microsoft Windows
- Microsoft Windows Search Component
- Microsoft Windows Speech
- Role: Windows Hyper-V
- Universal Plug and Play (upnp.dll)
- Windows Active Directory
- Windows Admin Center
- Windows Ancillary Function Driver for WinSock
- Windows Biometric Service
- Windows BitLocker
- Windows Boot Loader
- Windows Boot Manager
- Windows COM
- Windows Client Side Caching driver (csc.sys)
- Windows Cloud Files Mini Filter Driver
- Windows Common Log File System Driver
- Windows Container Isolation FS Filter Driver
- Windows Cryptographic Services
- Windows Encrypting File System (EFS)
- Windows File Explorer
- Windows GDI
- Windows HTTP.sys
- Windows Hello
- Windows Installer
- Windows Kerberos
- Windows Kernel
- Windows Kernel Memory
- Windows LUAFV
- Windows Local Security Authority Subsystem Service (LSASS)
- Windows Management Services
- Windows OLE
- Windows Print Spooler Components
- Windows Projected File System
- Windows RPC API
- Windows Recovery Environment Agent
- Windows Redirected Drive Buffering
- Windows Remote Desktop
- Windows Remote Desktop Licensing Service
- Windows Remote Procedure Call
- Windows SSDP Service
- Windows Sensor Data Service
- Windows Snipping Tool
- Windows Speech Brokered Api
- Windows Storage Spaces Controller
- Windows TCP/IP
- Windows TDI Translation Driver (tdx.sys)
- Windows USB Print Driver
- Windows Universal Plug and Play (UPnP) Device Host
- Windows User Interface Core
- Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys)
- Windows WalletService
- Windows Win32K - GRFX
- Windows Win32K - ICOMP
- Recommended Actions:
- Microsoft has officially released patches for these vulnerabilities. Organizations should contact their system maintenance vendors or refer to the following link: https://msrc.microsoft.com/update-guide/releaseNote/2026-Apr
- Reference:
Computer and Communication Center
Network Systems Division