Patch Day month

April 2026 vulnerabilities

A defender-focused view of 1,517 vulnerabilities across 4,653 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

4,653all patch recordsClear filters 145criticalShow these records 2Microsoft exploitation detectedShow these records 5Microsoft in CISA KEVShow these records 393tracked hereShow these records

Red Hat 3,880 Microsoft 737 Cisco 31 Android 5

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 24 of 24 · records 4,601–4,653 of 4,653

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-5893 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5893 Race in V8

CVE-2026-5892 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs

CVE-2026-5891 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI

CVE-2026-5890 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5890 Race in WebCodecs

CVE-2026-5889 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5889 Cryptographic Flaw in PDFium

CVE-2026-5888 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5888 Uninitialized Use in WebCodecs

CVE-2026-5887 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads

CVE-2026-5886 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5886 Out of bounds read in WebAudio

CVE-2026-5885 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebML

CVE-2026-5884 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5884 Insufficient validation of untrusted input in Media

CVE-2026-5883 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5883 Use after free in Media

CVE-2026-5882 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5882 Incorrect security UI in Fullscreen

CVE-2026-5881 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccess

CVE-2026-5880 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5880 Incorrect security UI in browser UI

CVE-2026-5879 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE

CVE-2026-5878 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5878 Incorrect security UI in Blink

CVE-2026-5877 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5877 Use after free in Navigation

CVE-2026-5876 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5876 Side-channel information leakage in Navigation

CVE-2026-5875 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5875 Policy bypass in Blink

CVE-2026-5874 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5874 Use after free in PrivateAI

CVE-2026-5873 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5873 Out of bounds read and write in V8

CVE-2026-5872 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5872 Use after free in Blink

CVE-2026-5871 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5871 Type Confusion in V8

CVE-2026-5869 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5869 Heap buffer overflow in WebML

CVE-2026-5870 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5870 Integer overflow in Skia

CVE-2026-5868 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE

CVE-2026-5867 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5867 Heap buffer overflow in WebML

CVE-2026-5866 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5866 Use after free in Media

CVE-2026-5865 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band1%Chromium: CVE-2026-5865 Type Confusion in V8

CVE-2026-5864 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio

CVE-2026-5863 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5863 Inappropriate implementation in V8

CVE-2026-5862 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5862 Inappropriate implementation in V8

CVE-2026-5861 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5861 Use after free in V8

CVE-2026-5860 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5860 Use after free in WebRTC

CVE-2026-5859 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5859 Integer overflow in WebML

CVE-2026-5858 ↗2026-04-10Microsoft Edge (Chromium-based)N/AOut-of-band1%Chromium: CVE-2026-5858 Heap buffer overflow in WebML

CVE-2026-5291 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5291 Inappropriate implementation in WebGL

CVE-2026-5289 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5289 Use after free in Navigation

CVE-2026-5290 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5290 Use after free in Compositing

CVE-2026-5287 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5287 Use after free in PDF

CVE-2026-5286 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5286 Use after free in Dawn

CVE-2026-5285 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5285 Use after free in WebGL

CVE-2026-5284 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5284 Use after free in Dawn

CVE-2026-5283 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE

CVE-2026-5280 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5280 Use after free in WebCodecs

CVE-2026-5279 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5279 Object corruption in V8

CVE-2026-5277 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5277 Integer overflow in ANGLE

CVE-2026-5276 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB

CVE-2026-5275 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE

CVE-2026-5274 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5274 Integer overflow in Codecs

CVE-2026-5273 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5273 Use after free in CSS

CVE-2026-5272 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5272 Heap buffer overflow in GPU

CVE-2026-5292 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-5292 Out of bounds read in WebCodecs

Narrow the complete month

Microsoft Security Response Center

Cross-vendor patches

Microsoft Security Response Center