---
title: Patch Tuesday - April 2026
description: RedLegg's April 2026 Patch Tuesday notice highlights threats to Microsoft Office. Immediate action is required to secure your systems
---

[Cybersecurity Blog | RedLegg ](https://www.redlegg.com/blog)

# [Patch Tuesday - April 2026](https://www.redlegg.com/blog/patch-tuesday-april-2026)

 Written by [RedLegg Blog](https://www.redlegg.com/blog/author/redlegg-blog) | 4/17/26 3:49 PM

**Important note: These are not the only vulnerabilities that were recently released; however, these are the vulnerabilities RedLegg has identified as critical and require immediate attention.*

# CRITICAL VULNERABILITIES

 

| **Windows IKE Extension** |  [CVE-2026-33824](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824)  <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26110> | **Critical** | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability  |
| --- | --- | --- | --- |
| ** Windows TCP/IP**  | [CVE-2026-33827](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33827)  |  **Critical**  | Windows TCP/IP Remote Code Execution Vulnerability  |
| ** Microsoft Office Word ** |  [CVE-2026-33114](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33114)  | ** Critical  ** | Microsoft Word Remote Code Execution Vulnerability  |
| ** Microsoft Office Word ** | ** [CVE-2026-33115](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33115) ** | ** Critical  ** | Microsoft Word Remote Code Execution Vulnerability  |
| ** Microsoft Office ** | ** [CVE-2026-32190](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32190) ** | ** Critical  ** | Microsoft Office Remote Code Execution Vulnerability  |
| ** .NET Framework ** | ** [CVE-2026-23666](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23666) ** | ** Critical  ** | .NET Framework Denial of Service Vulnerability  |
| **Windows Active Directory ** |  [CVE-2026-33826](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33826)  |  **Critical  **  | Windows Active Directory Remote Code Execution Vulnerability   |
| **Remote Desktop Client ** |  [CVE-2026-32157](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32157)  |  **Critical**   | Remote Desktop Client Remote Code Execution Vulnerability  |

 

[View full post](https://www.redlegg.com/blog/patch-tuesday-april-2026)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "RedLegg Blog"
  },
  "dateModified" : "2026-04-17T15:49:22.093Z",
  "datePublished" : "2026-04-17T15:49:08Z",
  "headline" : "Patch Tuesday - April 2026",
  "image" : {
    "@type" : "ImageObject",
    "height" : 630,
    "url" : "https://www.redlegg.com/hubfs/Blog%20Featured%20Image%20-Critical%20Bulletin%20v2.png",
    "width" : 1200
  },
  "mainEntityOfPage" : "https://www.redlegg.com/blog/patch-tuesday-april-2026",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/4675768/logo-red-01.png",
      "width" : 419.66666
    },
    "name" : "RedLegg Cybersecurity Blog"
  }
}
```