April 2026 saw one of Microsoft's largest-ever security updates, patching 169 vulnerabilities, including an actively exploited SharePoint flaw that CISA ordered federal agencies to fix by April 28.