CRITICALZero Day
Global

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

·Source: The Hacker News

Updated:

Executive Summary

Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one is rated Low in severity. Ninety-three of the flaws are

Analysis

Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one is rated Low in severity. Ninety-three of the flaws are
Source Attribution

Originally published by The Hacker News on Apr 15, 2026.

Related Threats

CRITICALZero Day

When Business Email Compromise Starts Rewriting Reality

Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details a

CVE-2024-45519CVE-2025-27915
Rapid7
CRITICALZero Day

Check Point hacked: The security software protecting your network has become a prime attack target

A firewall is supposed to be the barrier between attackers and the enterprise network, but that barrier can itself become a threat actors’ tool. Check Point has revealed that attackers are actively exploiting two vulnerabilities in its Security Gateway and Security Management products. The security software provider has warned that attackers are targeting CVE-2026-85102 , a remote code execution (

CVE-2026-85102CVE-2026-93616
CSO Online
CRITICALZero Day

F5 fixes actively exploited zero-day flaw in BIG-IP APM

Technology company F5 fixed a critical remote code execution vulnerability in its BIG-IP Access Policy Manager (APM) platform on Tuesday. The flaw impacts deployments configured as OAuth authorization servers and was already under active exploitation in the wild before the patch became available. BIG-IP APM is a software component in F5’s BIG-IP hardware platform that enables companies to control

CVE-2026-94127CVE-2025-5352
CSO Online