Vulnerabilities · 153 days ago
The immediate problem is not just the SharePoint flaw. It is the size of the patch set, which turns one urgent zero-day into a triage problem across 165 Microsoft CVEs and 80 Edge/Chromium fixes already shipped this month. Defenders have to separate active exploitation from the rest of the noise fast, and that is getting harder as vulnerability reports keep rising.
Microsoft says CVE-2026-32201 is being exploited in the wild. It is a SharePoint spoofing issue caused by improper input validation, and CISA has already added it to the KEV catalog. Microsoft also flagged 19 other flaws as more likely to be exploited, including issues in Defender, Windows, Office, Active Directory, TCP/IP, and other core components.
The broader risk is that AI-assisted reporting is inflating monthly patch volume faster than most teams can absorb it. That does not change the exploitability of any single bug, but it does raise the odds that a real zero-day gets buried in a release cycle that is already stretched thin.
Known exploited · CISA KEV
CVSS 6.5 MEDIUM: improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a… Microsoft patch: 5002861.
Patch available KB5002861 Download →
CISA federal remediation date Apr 28
5 sources covering this story
Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities
Microsoft fixes 169 vulnerabilities including exploited SharePoint CVE-2026-32201, prompting CISA remediation by April 28, 2026.
Microsoft Releases April 2026 Security Updates
JPCERT-AT-2026-0010 JPCERT/CC 2026-04-15 Microsoft Corporation April 2026 Security Updates https://msrc.microsoft.com/update-guide/en-us/releaseNote/2026-Apr According to Microsoft, among the vulnerabilities, the following vulnerability has been confirmed to be exploited in the…
Privilege Elevation Dominates Massive Microsoft Patch Update
Elevation-of-privilege bugs accounted for more than half of the 165 vulnerabilities patched, with two zero-days in that mix.
Microsoft drops its second-largest monthly batch of defects on record
The vendor disclosed one actively exploited zero-day vulnerability in Microsoft Office SharePoint that allows attackers to view information and make changes to disclosed information.
Microsoft Patches Exploited SharePoint Zero-Day and 160 Other Vulnerabilities
Experts say this is the second-largest Microsoft Patch Tuesday ever based on CVE count.
Part of the PlainSec briefing for 2026-04-15