·HSK 5

Microsoft
Wēiruǎn
微软
April
sìyuè
四月
Patch Tuesday (monthly security update)
bǔdīng xīngqī'èr
补丁星期二
to fix / to patch
xiūfù
修复
167 / one hundred sixty-seven
yībǎi liùshíqī
一百六十七
(general measure word)
gè
个
vulnerability / security flaw
lòudòng
漏洞
，
including / containing
hán
含
two
liǎng gè
两个
zero-day
líng rì
零日
vulnerability / security flaw
lòudòng
漏洞
。

Microsoft

Wēiruǎn

微软

April

sìyuè

四月

Patch Tuesday (monthly security update)

bǔdīng xīngqī'èr

补丁星期二

in total / altogether

gòng

共

to fix / to patch

xiūfù

修复

(completion particle)

了

167

yībǎi liùshíqī

一百六十七

(general measure word)

gè

个

security / safety

ānquán

安全

vulnerability / security flaw

lòudòng

漏洞

，

among which / of which

qízhōng

其中

including / containing

bāohán

包含

two

liǎng gè

两个

zero-day

líng rì

零日

vulnerability / security flaw

lòudòng

漏洞

。

one of which

qízhōng yī gè

其中一个

already

yǐ

已

to be subjected to / to suffer

zāodào

遭到

hackers

hēikè

黑客

in the wild / actively exploited

zàiyě

在野

active / actively

jījí

积极

to exploit / to use

lìyòng

利用

，

to affect / impacting

yǐngxiǎng

影响

SharePoint (Microsoft collaboration platform)

SharePoint

server

fúwùqì

服务器

。

April 17, 2026 at 10:00 AM

Microsoft

Wēiruǎn

微软

on / at (time marker)

yú

于

April 15th

sìyuè shíwǔ rì

四月十五日

to release / to publish

fābù

发布

(completion particle)

了

this month

běnyuè

本月

security / safety

ānquán

安全

patch / security update

bǔdīng

补丁

update / to update

gēngxīn

更新

，

in total / altogether

gòng

共

to fix / to patch

xiūfù

修复

(completion particle)

了

167

yībǎi liùshíqī

一百六十七

(general measure word)

gè

个

vulnerability / security flaw

lòudòng

漏洞

，

being / constituting

wéi

为

since the beginning of this year

jīnnián yǐlái

今年以来

single month

dān yuè

单月

to fix / to patch

xiūfù

修复

quantity / number

shùliàng

数量

the most / the highest

zuì duō

最多

(possessive/attributive particle)

的

one time / once

yī cì

一次

。

this time / this update

běn cì

本次

update

gēngxīn

更新

including / containing

bāohán

包含

two

liǎng gè

两个

zero-day

líng rì

零日

vulnerability / security flaw

lòudòng

漏洞

，

among which / of which

qízhōng

其中

one

yī gè

一个

already

yǐ

已

to be subjected to / to be exploited by

zāodào

遭到

hackers

hēikè

黑客

in the wild (active exploitation)

zàiyě

在野

actively

jījí

积极

to exploit / to leverage

lìyòng

利用

。

the one being actively exploited

bèi jījí lìyòng de

被积极利用的

vulnerability / security flaw

lòudòng

漏洞

identification number / numbered

biānhào

编号

as / designated as

wéi

为

CVE-2026-32201 (vulnerability identifier)

CVE-2026-32201

，

to exist / residing in

cúnzài

存在

in / within

yú

于

SharePoint (Microsoft collaboration platform)

SharePoint

server

fúwùqì

服务器

in / within

zhōng

中

，

to allow / to permit

yǔnxǔ

允许

without / not having undergone

wèijīng

未经

verification / authentication

yànzhèng

验证

(possessive/attributive particle)

的

remote

yuǎnchéng

远程

attacker / threat actor

gōngjīzhě

攻击者

without needing / no need for

wúxū

无需

user

yònghù

用户

interaction / user action

jiāohù

交互

can then / is thus able to

jíkě

即可

to launch / to initiate

fāqǐ

发起

spoofing / deceptive

qīpiànxìng

欺骗性

attack / to attack

gōngjī

攻击

。

the other one / another

lìng yī gè

另一个

zero-day

líng rì

零日

vulnerability

lòudòng

漏洞

CVE-2026-33825 (vulnerability identifier)

CVE-2026-33825

to affect / impacting

yǐngxiǎng

影响

Microsoft Defender (security software)

Microsoft Defender

，

its / related

qí

其

exploitation

lìyòng

利用

code / exploit code

dàimǎ

代码

previously / before this

cǐqián

此前

already

yǐ

已

on / at

zài

在

GitHub (code hosting platform)

GitHub

on / above

shàng

上

to make public / publicly disclosed

gōngkāi

公开

，

can / is able to

kě

可

to allow / to permit

yǔnxǔ

允许

low-privilege

dī quánxiàn

低权限

user

yònghù

用户

jiāng

将

system

xìtǒng

系统

privileges / access rights

quánxiàn

权限

to elevate / to escalate

tíshēng

提升

。

this time / this round

cǐ cì

此次

167

yībǎi liùshíqī

一百六十七

(general measure word)

gè

个

vulnerabilities

lòudòng

漏洞

(possessive/attributive particle)

的

fix / patch

xiūfù

修复

quantity / number

shùliàng

数量

almost / nearly

jīhū

几乎

shì

是

this year

jīnnián

今年

February

èryuè

二月

(possessive/attributive particle)

的

three times / triple

sān bèi

三倍

，

to reflect / to indicate

fǎnyìng

反映

out / outward

chū

出

current / present

dāngqián

当前

cybersecurity / network security

wǎngluò ānquán

网络安全

threat

wēixié

威胁

situation / landscape

xíngshì

形势

(possessive/attributive particle)

的

severity / seriousness

yánjùnxìng

严峻性

。

eight

bā gè

八个

vulnerabilities

lòudòng

漏洞

(passive marker)

bèi

被

to rate / to assess

píngdìng

评定

as / to be

wéi

为

high-risk / critical severity

gāowēi

高危

level / grade

jíbié

级别

，

among which / of which

qízhōng

其中

seven

qī gè

七个

to involve / relating to

shèjí

涉及

remote

yuǎnchéng

远程

code

dàimǎ

代码

execution / to execute

zhíxíng

执行

，

the remaining one

lìng yī gè

另一个

being / classified as

wéi

为

denial of service / DoS

jùjué fúwù

拒绝服务

type / category

lèi

类

vulnerability

lòudòng

漏洞

。

security

ānquán

安全

research

yánjiū

研究

institution / organization

jīgòu

机构

to recommend / to advise

jiànyì

建议

enterprises / organizations

qǐyè

企业

and

hé

和

individuals / personal

gèrén

个人

users

yònghù

用户

immediately / at once

lìjí

立即

to install / to apply

ānzhuāng

安装

this / the current

běn cì

本次

patch / security update

bǔdīng

补丁

，

in order to prevent / to guard against

yǐfáng

以防

known

yǐzhī

已知

vulnerabilities

lòudòng

漏洞

to suffer / to be subjected to

zāo

遭

further / additionally

jìn yī bù

进一步

exploitation / to exploit

lìyòng

利用

。

New Words

Wēiruǎn

微软

Microsoft

sìyuè shíwǔ rì

四月十五日

April 15th

fābù

发布

to release / to publish

běnyuè

本月

this month

ānquán

安全

security / safety

bǔdīng

补丁

patch / security update

gēngxīn

更新

update / to update

xiūfù

修复

to fix / to patch

yībǎi liùshíqī

一百六十七

167

lòudòng

漏洞

vulnerability / security flaw

jīnnián yǐlái

今年以来

since the beginning of this year

dān yuè

单月

single month

News in English

Science & Technology

Microsoft April 2026 Patch Tuesday Fixes 167 Vulnerabilities Including Two Zero-Day Flaws

Microsoft April 2026 Patch Tuesday patched 167 security vulnerabilities, including two zero-day flaws. One of the zero-days, affecting SharePoint Server, is being actively exploited in the wild by attackers.

Supply chain optimization is becoming a priority for manufacturing companies. Automation technologies are improving efficiency and reducing costs. Companies are investing in digital supply chain management systems. Real-time tracking enables better inventory management. Supplier relationships are strengthened through digital collaboration platforms. Supply chain resilience is being enhanced through diversification.

New Words

News in English

Microsoft April 2026 Patch Tuesday Fixes 167 Vulnerabilities Including Two Zero-Day Flaws

More in Science & Technology

Moonshot AI (Chinese AI startup)Yuè zhī àn miàn月之暗面to release / to publishfābù发布global / worldwidequánqiú全球the largestzuìdà最大open-weight (AI model weights)kāiyuán quánzhòng开源权重model (AI)móxíng模型Kimi K3 (AI model by Moonshot AI)Kimi K3Kimi K3。