Patch Day month

April 2026 vulnerabilities

A defender-focused view of 1,304 vulnerabilities across 2,477 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

2,477all patch recordsClear filters 141criticalShow these records 2Microsoft exploitation detectedShow these records 5Microsoft in CISA KEVShow these records 344tracked hereShow these records

Red Hat 1,704 Microsoft 737 Cisco 31 Android 5

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 13 of 13 · records 2,401–2,477 of 2,477

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-5919 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSockets

CVE-2026-5918 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5918 Inappropriate implementation in Navigation

CVE-2026-5915 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML

CVE-2026-5914 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5914 Type Confusion in CSS

CVE-2026-5913 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5913 Out of bounds read in Blink

CVE-2026-5912 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5912 Integer overflow in WebRTC

CVE-2026-5911 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5911 Policy bypass in ServiceWorkers

CVE-2026-5910 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5910 Integer overflow in Media

CVE-2026-5909 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5909 Integer overflow in Media

CVE-2026-5908 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5908 Integer overflow in Media

CVE-2026-5907 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5907 Insufficient data validation in Media

CVE-2026-5906 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5906 Incorrect security UI in Omnibox

CVE-2026-5905 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5905 Incorrect security UI in Permissions

CVE-2026-5904 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band—Chromium: CVE-2026-5904 Use after free in V8

CVE-2026-5903 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5903 Policy bypass in IFrameSandbox

CVE-2026-5902 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5902 Race in Media

CVE-2026-5901 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5901 Policy bypass in DevTools

CVE-2026-5900 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5900 Policy bypass in Downloads

CVE-2026-5899 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5899 Incorrect security UI in History Navigation

CVE-2026-5898 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5898 Incorrect security UI in Omnibox

CVE-2026-5897 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5897 Incorrect security UI in Downloads

CVE-2026-5896 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5896 Policy bypass in Audio

CVE-2026-5895 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5895 Incorrect security UI in Omnibox

CVE-2026-5894 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5894 Inappropriate implementation in PDF

CVE-2026-5893 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5893 Race in V8

CVE-2026-5892 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs

CVE-2026-5891 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI

CVE-2026-5890 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5890 Race in WebCodecs

CVE-2026-5889 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5889 Cryptographic Flaw in PDFium

CVE-2026-5888 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5888 Uninitialized Use in WebCodecs

CVE-2026-5887 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads

CVE-2026-5886 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5886 Out of bounds read in WebAudio

CVE-2026-5885 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebML

CVE-2026-5884 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5884 Insufficient validation of untrusted input in Media

CVE-2026-5883 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5883 Use after free in Media

CVE-2026-5882 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5882 Incorrect security UI in Fullscreen

CVE-2026-5881 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccess

CVE-2026-5880 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5880 Incorrect security UI in browser UI

CVE-2026-5879 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE

CVE-2026-5878 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5878 Incorrect security UI in Blink

CVE-2026-5877 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5877 Use after free in Navigation

CVE-2026-5876 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5876 Side-channel information leakage in Navigation

CVE-2026-5875 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5875 Policy bypass in Blink

CVE-2026-5874 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5874 Use after free in PrivateAI

CVE-2026-5873 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5873 Out of bounds read and write in V8

CVE-2026-5872 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5872 Use after free in Blink

CVE-2026-5871 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5871 Type Confusion in V8

CVE-2026-5869 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5869 Heap buffer overflow in WebML

CVE-2026-5870 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5870 Integer overflow in Skia

CVE-2026-5868 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE

CVE-2026-5867 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5867 Heap buffer overflow in WebML

CVE-2026-5866 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5866 Use after free in Media

CVE-2026-5865 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band1%Chromium: CVE-2026-5865 Type Confusion in V8

CVE-2026-5864 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio

CVE-2026-5863 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5863 Inappropriate implementation in V8

CVE-2026-5862 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5862 Inappropriate implementation in V8

CVE-2026-5861 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5861 Use after free in V8

CVE-2026-5860 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5860 Use after free in WebRTC

CVE-2026-5859 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5859 Integer overflow in WebML

CVE-2026-5858 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band1%Chromium: CVE-2026-5858 Heap buffer overflow in WebML

CVE-2026-5291 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5291 Inappropriate implementation in WebGL

CVE-2026-5289 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5289 Use after free in Navigation

CVE-2026-5290 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5290 Use after free in Compositing

CVE-2026-5287 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5287 Use after free in PDF

CVE-2026-5286 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5286 Use after free in Dawn

CVE-2026-5285 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5285 Use after free in WebGL

CVE-2026-5284 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5284 Use after free in Dawn

CVE-2026-5283 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE

CVE-2026-5280 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5280 Use after free in WebCodecs

CVE-2026-5279 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5279 Object corruption in V8

CVE-2026-5277 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5277 Integer overflow in ANGLE

CVE-2026-5276 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB

CVE-2026-5275 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE

CVE-2026-5274 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5274 Integer overflow in Codecs

CVE-2026-5273 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5273 Use after free in CSS

CVE-2026-5272 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5272 Heap buffer overflow in GPU

CVE-2026-5292 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5292 Out of bounds read in WebCodecs

Narrow the complete month

Microsoft Security Response Center

Cross-vendor patches

Microsoft Security Response Center