CVE-2026-32202

MEDIUM KEV

Windows Shell Spoofing Vulnerability

Title source: cna

Description

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

References (1)

Scores

CVSS v3 4.3
EPSS 0.0009
EPSS Percentile 25.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CISA KEV 2026-04-28
VulnCheck KEV 2026-04-14
CWE
CWE-693
Status published
Products (37)
microsoft/windows_10_1607 < 10.0.14393.9060 (2 CPE variants)
microsoft/windows_10_1809 < 10.0.17763.8644 (2 CPE variants)
microsoft/windows_10_21h2 < 10.0.19044.7184 (3 CPE variants)
microsoft/windows_10_22h2 < 10.0.19045.7184 (3 CPE variants)
Microsoft/Windows 10 Version 1607 10.0.14393.0 - 10.0.14393.9060
Microsoft/Windows 10 Version 1809 10.0.17763.0 - 10.0.17763.8644
Microsoft/Windows 10 Version 21H2 10.0.19044.0 - 10.0.19044.7184
Microsoft/Windows 10 Version 22H2 10.0.19045.0 - 10.0.19045.7184
microsoft/windows_11_23h2 < 10.0.22631.6936 (2 CPE variants)
microsoft/windows_11_24h2 < 10.0.26100.8246 (2 CPE variants)
... and 27 more
Published Apr 14, 2026
KEV Added Apr 28, 2026
Tracked Since Apr 14, 2026