Vulnerability intelligence
CVE-2026-32202
Microsoft Windows Protection Mechanism Failure Vulnerability
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVSS Score
4.3
Medium
EPSS — Exploit Probability
4.9%
Riskier than 92% of all CVEs · checked 2026-10-15
Exploitation
Confirmed in the wild
KEV since 2026-04-28
Remediation
Patch available
Federal deadline 2026-05-12
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-05-12.
6 articles across 5 outlets · first covered Apr 27, 2026 · latest Apr 29, 2026
Associated threat actors
Coverage timeline
-
CISA Flags Actively Exploited CVE-2024-1708 and Windows Flawthehackernews.com · Apr 29, 2026
-
CISA Adds ConnectWise ScreenConnect Path Flaw and Windows Shell Bugsecurityaffairs.com · Apr 29, 2026
-
Microsoft Windows Shell flaw allows network spoofing; patch urgedwww.cisa.gov · Apr 28, 2026
-
CISA Warns of Active Windows Shell Spoof Flaw CVE-2026-32202cisa.gov · Apr 28, 2026
-
Microsoft Warns of Active Exploit in CVE-2026-32202 Spoof Flawthehackernews.com · Apr 28, 2026
-
APT28 exploits Windows SmartScreen gap for zero click LNK attackswww.securityweek.com · Apr 27, 2026