Actively exploited in the wild
Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2026-04-28. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2026-32202
MediumCVSS 4.3KEVExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
A protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. This could lead to impersonation of trusted entities.
Risk Assessment
An attacker could impersonate a trusted entity, potentially leading to fraud or unauthorized access to resources.
Recommendation
Apply the latest Windows security updates. Restrict network access to critical systems.
Original NVD description (English source)
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.