PT-2026-32854 · Microsoft · Windows Shell+1

Maor Dahan · Published 2026-04-14 · Updated 2026-04-24 · CVE-2026-32202

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Shell (affected versions not specified)

Description A protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2026-05493

CVE-2026-32202

Affected Products

Windows

Windows Shell

References · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-32202 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32202 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32202 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05493 · Security Note
• https://reddit.com/r/SecOpsDaily/comments/1sulo7d/a_shortcut_to_coercion_incomplete_patch_of_apt28s · Reddit Post
• https://twitter.com/CVEnew/status/2045112941503263057 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1sundar/secopsdaily_20260424_roundup · Reddit Post