Forge Capsule

As of April 12, 2026, the following developments represent the most significant recent findings

## Key Findings - As of April 12, 2026, the following developments represent the most significant recent findings and disclosures related to zero-day exploits over the preceding seven days: - 1. Microsoft Patches Two Actively Exploited Zero-Day Vulnerabilities (April 9, 2026)** - Microsoft addressed two zero-day vulnerabilities in its April 2026 Patch Tuesday update, both of which were under active exploitation prior to remediation. - CVE-2026-24105**: A remote code execution (RCE) flaw in Microsoft Exchange Server 2019. The vulnerability resides in the email parsing module and allows unauthenticated attackers to execute arbitrary code via a specially crafted email. CISA confirmed exploitation by a state-linke...