Don’t Wait for a Patch. Mitigate RedSun Zero-Day Risk in Microsoft Defender Today

This Qualys feed highlights several high-priority security items for April 2026. Most urgent: RedSun — a Microsoft Defender zero-day Local Privilege Escalation (LPE) that can allow a low‑privileged user to gain SYSTEM on Windows without a kernel exploit or administrator interaction; Qualys urges immediate mitigations rather than waiting for a Defender patch. Other notable items: Oracle’s April 2026 Critical Patch Update (481 vulnerabilities across multiple product families); Microsoft & Adobe Patch Tuesday (163 Microsoft vulnerabilities, including eight criticals, one publicly‑disclosed zero‑d