CVE-2026-32202

MEDIUM CISA KEV

ACT NOW Priority: 3.05 BB Relevance: 69/100

Published: 2026-04-14 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network

AC: Low

PR: None

UI: Required

S: Unchanged

C: Low

I: None

A: None

Description

Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows

Date Added 2026-04-28

Remediation Due 2026-05-12

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32202 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32202

Weakness Classification (1)

CWE-693

Affected Software (25)

Vendor	Product	Version
microsoft	windows_10_1607	< 10.0.14393.9060
microsoft	windows_10_1607	< 10.0.14393.9060
microsoft	windows_10_1809	< 10.0.17763.8644
microsoft	windows_10_1809	< 10.0.17763.8644
microsoft	windows_10_21h2	< 10.0.19044.7184
microsoft	windows_10_21h2	< 10.0.19044.7184
microsoft	windows_10_21h2	< 10.0.19044.7184
microsoft	windows_10_22h2	< 10.0.19045.7184
microsoft	windows_10_22h2	< 10.0.19045.7184
microsoft	windows_10_22h2	< 10.0.19045.7184
microsoft	windows_11_23h2	< 10.0.22631.6936
microsoft	windows_11_23h2	< 10.0.22631.6936
microsoft	windows_11_24h2	< 10.0.26100.8246
microsoft	windows_11_24h2	< 10.0.26100.8246
microsoft	windows_11_25h2	< 10.0.26200.8246
microsoft	windows_11_25h2	< 10.0.26200.8246
microsoft	windows_11_26h1	< 10.0.28000.1836
microsoft	windows_11_26h1	< 10.0.28000.1836
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	< 10.0.14393.9060
microsoft	windows_server_2019	< 10.0.17763.8644
microsoft	windows_server_2022	< 10.0.20348.5020
microsoft	windows_server_2022_23h2	< 10.0.25398.2274
microsoft	windows_server_2025	< 10.0.26100.32690