CVEs published in April 2026
516 tracked CVEs from 19 vendors had their first vendor advisory published in April 2026: 113 critical, 224 high, 12 in CISA KEV. Newest first.
372 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-30778High
Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.
Apache · 1 advisory - Added
CVE-2026-0636Medium
LDAP injection vulnerability in LDAPStoreHelper.java
NetApp, Red Hat · 2 advisories - Added
CVE-2026-40688Medium
Out-Of-Bounds Write in administrative interface
Fortinet · 1 advisory - Added
CVE-2025-54550High
Apache Airflow: RCE by race condition in example_xcom dag
Apache · 1 advisory - Added
CVE-2026-6361High
Heap buffer overflow in PDFium
Palo Alto, Red Hat · 4 advisories - Added
CVE-2026-6305Critical
Heap buffer overflow in PDFium
Palo Alto, Red Hat · 4 advisories - Added
CVE-2026-32214Medium
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33829Medium
Windows Snipping Tool Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33824CriticalCISA KEV
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33827High
Windows TCP/IP Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33104High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33101High
Windows Print Spooler Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33100High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33099High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32225High
Windows Shell Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32201MediumCISA KEV
Microsoft SharePoint Server Improper Input Validation Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32176Medium
SQL Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32164High
Windows User Interface Core Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32163High
Windows User Interface Core Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32162High
Windows COM Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32155High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32151Medium
Windows Shell Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32150High
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32149High
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32091High
Microsoft Brokering File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32088Medium
Windows Biometric Service Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32086High
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32084Medium
Windows Print Spooler Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32080High
Windows WalletService Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32079Medium
Web Account Manager Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32078High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32077High
Windows UPnP Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32076High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32074High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32072Medium
Active Directory Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32070High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32069High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32068High
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27930Medium
Windows GDI Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27928High
Windows Hello Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27925Medium
Windows UPnP Device Host Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27923High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27922High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27920High
Windows UPnP Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27916High
Windows UPnP Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27914High
Microsoft Management Console Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27913High
Windows BitLocker Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27912High
Windows Kerberos Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27911High
Windows User Interface Core Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27910High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-27909High
Windows Search Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26184High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26182High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26178High
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26177High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26176High
Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26173High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26172High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26170High
PowerShell Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26169Medium
Windows Kernel Memory Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26168High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26163High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26159High
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26156High
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26153High
Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-26152High
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20806Medium
Windows COM Server Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-20928Medium
Windows Recovery Environment Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32212Medium
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33826High
Windows Active Directory Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33120High
Microsoft SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33098High
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33096High
HTTP.sys Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32223Medium
Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32222High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32221High
Windows Graphics Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32220Medium
UEFI Secure Boot Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32219High
Microsoft Brokering File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32218Medium
Windows Kernel Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32217Medium
Windows Kernel Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32215Medium
Windows Kernel Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32202MediumCISA KEV
Microsoft Windows Protection Mechanism Failure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32183High
Windows Snipping Tool Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32181Medium
Connected User Experiences and Telemetry Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32167Medium
SQL Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32165High
Windows User Interface Core Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-0390Medium
UEFI Secure Boot Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32160High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32159High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32158High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32157High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32156High
Windows UPnP Device Host Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32154High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32152High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32093High
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32090High
Windows Speech Brokered Api Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32089High
Windows Speech Brokered Api Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32087High
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32085Medium
Remote Procedure Call Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-32083High
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
MS Server · 1 advisory