Beyond the Help Desk

April Patch Tuesday

15 April 2026

April 2026 Patch Tuesday arrives on the heels of two pre-Patch Tuesday zero-days — a Google Chrome exploit (CVE-2026-5281) patched April 1 and an actively exploited Adobe Acrobat Reader zero-day (CVE-2026-34621) patched April 10 — making this one of the most eventful lead-ups in recent memory. Microsoft resolved 169 CVEs this month, the second-largest Patch Tuesday on record behind October 2025's 175. The release includes one zero-day exploit in Microsoft SharePoint (CVE-2026-32201) and one publicly disclosed vulnerability in Microsoft Defender (CVE-2026-33825). We are tracking seven Adobe updates resolving 29 CVEs this Patch Tuesday, plus the Acrobat zero-day bulletin. Priority actions this month: patch Adobe Acrobat and Chrome immediately, treat SharePoint as urgent given active exploitation, and deploy the Windows OS cumulative update which resolves 128 CVEs including 4 Critical.

Chris Goettl
Vice President, Product Management, Security
Ivanti
Todd Schell
Product Manager for Patch
Ivanti