Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities

Microsoft has released its monthly security update for April 2026, which includes 165 vulnerabilities affecting a wide range of products, including eight Microsoft marked as "critical." CVE-2026-23666 is a critical Denial of Service DoS vulnerability that affects the .NET framework. Successful...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to bypass security measures, impersonate another user and thus gain elevated privileges and access to sensitive data. For successful abuse, the malicious party must trick the victim...

EUVD-2026-22639

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

EUVD-2026-22679

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

EUVD-2026-22581

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-22583

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-22569

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-22567

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

EUVD-2026-22571

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-22587

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-22579

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-5756

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

CVE-2026-33114

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-32198

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32199

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32197

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32190

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-32189

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-23657

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-5756

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...