Microsoft · ServicingStack update · April 14, 2026

KB5082060: April 2026 cumulative update for Windows Server 23H2

KB5082060, released April 14, 2026, fixes 118 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.2274). One of them is being exploited (CVE-2026-33824); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

118

4 rated Critical

Exploited

CVE-2026-33824

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.7705

99th percentile

Priority of the 118 CVEs

Patch now 1
                                Urgent 17
                                High 77
                                Routine 23

Applies to

Product	Build after install
Windows Server 2022, 23H2 Edition (Server Core installation)	25398.2274

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2026-33824	Windows IKE Extension	Remote Code Execution	9.8	0.7705	KEVExploited
Urgent	CVE-2026-27914	Microsoft Management Console	Elevation of Privilege	7.8	0.0243	More likely
Urgent	CVE-2026-26169	Windows Kernel Memory	Information Disclosure	6.1	0.0231	More likely
Urgent	CVE-2026-32162	Windows COM	Elevation of Privilege	8.4	0.0192	More likely
Urgent	CVE-2026-27909	Microsoft Windows Search Component	Elevation of Privilege	7.8	0.0177	More likely
Urgent	CVE-2026-27908	Windows TDI Translation Driver (tdx.sys)	Elevation of Privilege	7.0	0.0155	More likely
Urgent	CVE-2026-32225	Windows Shell	Security Feature Bypass	8.8	0.0120	More likely
Urgent	CVE-2026-27921	Windows TCP/IP	Elevation of Privilege	7.0	0.0119	More likely
Urgent	CVE-2026-32093	Function Discovery Service (fdwsd.dll)	Elevation of Privilege	7.0	0.0112	More likely
Urgent	CVE-2026-33827	Windows TCP/IP	Remote Code Execution	8.1	0.0084	Exploitation Less Likely
Urgent	CVE-2026-26151	Windows Remote Desktop	Spoofing	7.1	0.0083	More likely
Urgent	CVE-2026-32157	Remote Desktop Client	Remote Code Execution	8.8	0.0078	Exploitation Less Likely
Urgent	CVE-2026-33826	Windows Active Directory	Remote Code Execution	8.0	0.0054	More likely
Urgent	CVE-2026-32152	Desktop Window Manager	Elevation of Privilege	7.8	0.0046	More likely
Urgent	CVE-2026-32154	Desktop Window Manager	Elevation of Privilege	7.8	0.0038	More likely
Urgent	CVE-2026-32070	Windows Common Log File System Driver	Elevation of Privilege	7.0	0.0032	More likely
Urgent	CVE-2026-27913	Windows BitLocker	Security Feature Bypass	7.7	0.0030	More likely
Urgent	CVE-2026-32075	Windows Universal Plug and Play (UPnP) Device Host	Elevation of Privilege	7.0	0.0027	More likely
High	CVE-2026-33096	Windows HTTP.sys	Denial of Service	7.5	0.0125	Exploitation Less Likely
High	CVE-2026-26154	Windows Server Update Service	Tampering	7.5	0.0106	Exploitation Less Likely
High	CVE-2026-32071	Windows Local Security Authority Subsystem Service (LSASS)	Denial of Service	7.5	0.0106	Exploitation Less Likely
High	CVE-2026-32183	Windows Snipping Tool	Remote Code Execution	7.8	0.0062	Exploitation Less Likely
High	CVE-2026-26179	Windows Kernel	Elevation of Privilege	7.8	0.0044	Exploitation Less Likely
High	CVE-2026-26178	Windows Advanced Rasterization Platform	Elevation of Privilege	8.8	0.0042	Exploitation Less Likely
High	CVE-2026-26156	Role: Windows Hyper-V	Remote Code Execution	7.8	0.0041	Exploitation Less Likely

Released the same day

KB5002808
Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)
KB5002853
Microsoft SharePoint Server Subscription Edition
KB5002854
Microsoft SharePoint Server 2019
KB5002855
Office Online Server
KB5002856
Microsoft SharePoint Server 2019
KB5002859
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002860
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002861
Microsoft SharePoint Enterprise Server 2016
KB5002862
Microsoft SharePoint Enterprise Server 2016
KB5082052
Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems
KB5082063
Windows Server 2025, Windows Server 2025 (Server Core installation)
KB5082123
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more

Vendor advisory

https://support.microsoft.com/help/5082060

Our write-up

April 2026 Patch Tuesday: 163 CVEs, Two Zero-Days, and a Server Update That Broke Domain Controllers

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5082060">KB5082060 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.