PT-2026-32731 · Microsoft · Windows 10+1

Published 2026-04-14 · Updated 2026-04-22 · CVE-2026-26151

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions 10.0.14393.0 through 10.0.14393.9059

Description Insufficient UI warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network by misleading users into dangerous operations, which compromises session integrity.

Recommendations Update Microsoft Windows 10 to version 10.0.14393.9060 or later.

Fix

Weakness Enumeration

CWE-357

Related Identifiers

BDU:2026-05490

CVE-2026-26151

Affected Products

Windows

Windows 10

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26151 · Security Note
• https://bdu.fstec.ru/vul/2026-05490 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-26151 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26151 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26151 · Security Note
• https://twitter.com/infoflowcloud/status/2045114945684050363 · Twitter Post
• https://reddit.com/r/SysAdminBlogs/comments/1ssunla/heads_up_your_rdp_files_just_became_untrusted · Reddit Post
• https://twitter.com/RedHornet_Intel/status/2044117482156228654 · Twitter Post
• https://twitter.com/CVEnew/status/2045112996670873692 · Twitter Post