PT-2026-32811 · Microsoft · Windows Remote Procedure Call+1

David Zhu · Published 2026-04-14 · Updated 2026-04-17 · CVE-2026-32085

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Remote Procedure Call (affected versions not specified)

Description An issue in Windows Remote Procedure Call allows an authorized attacker to locally disclose sensitive information. This data leak can be used by attackers to map the system environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-05429

CVE-2026-32085

Affected Products

Windows

Windows Remote Procedure Call

References · 7

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32085 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32085 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32085 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-32085 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05429 · Security Note
• https://twitter.com/windowsforum/status/2044130945989537813 · Twitter Post
• https://twitter.com/CVEnew/status/2045112964274118821 · Twitter Post