Important Notice: Security vulnerabilities of Microsoft (updated at 15 April 2026)

關於 Microsoft 的安全漏洞通告 (更新於 2026年4月15日)

 2026-04-15     ICTO     Bulletin / 公告 

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Microsoft have recently released its April security update notice, there are 165 vulnerability updates this time.

The updates this time mainly cover the following components:  Microsoft Graphics Component, Windows Kerberos, Windows Kernel, Windows Hyper-V, SQL Server, Windows File Server, Windows App Installer, etc. products vulnerabilities.

Details of the vulnerabilities: 

  • Microsoft SharePoint Server Spoofing Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201

  • Windows Active Directory Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33826

  • Microsoft Office Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32190

  • .NET Framework Denial of Service Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23666

  • Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824

  • Windows TCP/IP Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33827

  • Microsoft Word Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33114
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33115

  • Remote Desktop Client Remote Code Execution Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32157

  • Windows Shell Security Feature Bypass Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32225

  • Windows COM Elevation of Privilege Vulnerability

For more details, please refer to: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32162

For more details about Microsoft April Updates, please refer to: https://msrc.microsoft.com/update-guide/releaseNote/2026-apr

If the relevant affected products are used, please install the security updates released by Microsoft as soon as possible. 

Reference

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

各位用戶：

資訊及通訊科技部接獲網絡安全事故預警及應急中心的通知，Microsoft 近日發布了 4月安全更新通告，此次包含了 165個漏洞更新。

此次釋出的更新主要涵蓋了以下組件： Microsoft Graphics Component, Windows Kerberos, Windows Kernel, Windows Hyper-V, SQL Server, Windows File Server, Windows App Installer 等產品的漏洞。

漏洞詳情:

  • Microsoft SharePoint Server 欺騙漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201

  •  Windows Active Directory 遠程代碼執行漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33826

  •  Microsoft Office 遠程代碼執行漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32190

  •   .NET Framework 拒絕服務漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23666

  •  Windows Internet 密鑰交換 (IKE) 服務擴展遠程代碼執行漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824

  •  Windows TCP/IP 遠程代碼執行漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33827

  •  Microsoft Word 遠程代碼執行漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33114
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33115

  •  Windows 遠程桌面客戶端遠程代碼執行漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32157

  •  Windows Shell 安全功能繞過漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32225

  •  Windows COM 權限提升漏洞

有關詳情可參考：https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32162

Microsoft 4月更新有關詳情可參考：https://msrc.microsoft.com/update-guide/releaseNote/2026-apr

倘有使用相關受影響產品，須盡快安裝由微軟公司釋出的安全更新。

參考資料

如有任何疑問，請聯絡資訊及通訊科技部服務中心。

服 務 中 心
位置 : 中央教學樓東5座（E5）二樓2085室 (電子地圖)
電話 : 8822 8600
電郵 : icto.helpdesk@um.edu.mo

資訊及通訊科技部