Articles from April 2026
Browse all Windows news articles published in April 2026
CVE-2026-32159: Critical Windows Push Notifications Vulnerability Threatens Enterprise Security
Microsoft has disclosed CVE-2026-32159, a Windows Push Notifications Elevation of Privilege vulnerability that security teams are scrambling to understand and patch. This critical security flaw in...
CVE-2026-32158: MSRC Confirms Windows Push Notifications EoP Flaw with High Exploitability Rating
Microsoft's MSRC entry for CVE-2026-32158 reveals a Windows Push Notifications Elevation of Privilege Vulnerability with a critical confidence rating that security researchers should immediately...
CVE-2026-32157: Microsoft's Remote Desktop Client RCE Vulnerability Analysis
Microsoft's CVE-2026-32157 advisory for the Remote Desktop Client Remote Code Execution Vulnerability represents a critical security threat that demands immediate attention from IT administrators and...
CVE-2026-32156: How Microsoft's Confidence Ratings Shape Windows UPnP Patch Priorities
Microsoft's CVE-2026-32156 reveals a critical Windows UPnP Device Host remote code execution vulnerability that exposes how the company's internal confidence assessments directly influence patch...
CVE-2026-32154 DWM Elevation of Privilege Vulnerability: Microsoft's Confidence Rating and Windows Security Implications
Microsoft's CVE-2026-32154 vulnerability in the Desktop Window Manager (DWM) exposes a critical local privilege escalation flaw that could allow attackers to gain SYSTEM-level access on Windows...
CVE-2026-32152: Critical DWM Privilege Escalation Vulnerability Requires Immediate Patching
Microsoft has issued a critical security advisory for CVE-2026-32152, a Desktop Window Manager elevation of privilege vulnerability affecting multiple Windows versions. The flaw received a CVSS score...
CVE-2026-32093: Windows fdwsd.dll Elevation-of-Privilege Vulnerability Demands Immediate Patching
Microsoft has documented CVE-2026-32093 as an elevation-of-privilege vulnerability in the Windows Function Discovery Service, specifically involving the fdwsd.dll component. The security advisory...
Rare 'Low' Confidence Label on CVE-2026-32090 Leaves Windows Speech API Patch Priority Uncertain
Microsoft's Security Update Guide entry for CVE-2026-32090 carries a \"Low\" confidence rating, a rarely-seen designation that security researchers say indicates significant uncertainty about the...
CVE-2026-32089 flaw lets attackers hijack Windows Speech API for SYSTEM access
Microsoft has assigned CVE-2026-32089 to a Windows Speech Brokered API elevation-of-privilege vulnerability, marking another critical local privilege escalation flaw in a Windows component that...
Google's Windows Search App Upgrade: Alt+Space Shortcut, Lens Integration, and AI Mode Explained
Google has quietly upgraded its Windows desktop search application with features that challenge Microsoft's own search capabilities. The updated app introduces a system-wide Alt+Space keyboard...
CVE-2026-32087: Windows Function Discovery Vulnerability Exposes Local Privilege Escalation Risk
Microsoft's CVE-2026-32087 reveals a high-confidence local privilege escalation vulnerability in the Windows Function Discovery Service, specifically within the fdwsd.dll component. This security...
CISA Adds 17-Year-Old Office Flaw to KEV Catalog: CVE-2009-0238 Still Actively Exploited
The Cybersecurity and Infrastructure Security Agency has added two Microsoft vulnerabilities to its Known Exploited Vulnerabilities Catalog, including a 17-year-old Office flaw that attackers...