Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-32202

Microsoft Windows Protection Mechanism Failure Vulnerability

4.3
CVSS 3.1
1
story
APR 28
added to KEV
Severity
4.3 Medium · vendor score
Vendor
Microsoft
Product
Windows
Published
Apr 14, 2026
Added to KEV
Apr 28, 2026
KEV deadline
May 12, 2026
Ransomware use
Unknown
Weakness
CWE-693

What it is

Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesWindows CVE-2026-32202 Exploited in the WildThe current exploits are targeting CVE-2026-32202, a bug in the Windows Shell that allows an attacker to gain access to some sensitive data on the target network.DENNIS FISHER · 2 MIN

Official references

6 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorymsrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202Fixvicarius.io/vsociety/posts/cve-2026-32202-mitigation-script-spoofing-vulnerability-in-windows-shellAnalysisvicarius.io/vsociety/posts/cve-2026-32202-detection-script-spoofing-vulnerability-in-windows-shell