CVE-2026-32184

CVE-2026-32184 is a deserialization vulnerability in Microsoft High Performance Compute Pack (HPC) that enables authorized local users to escalate their privileges on affected systems. The flaw stems from improper handling of untrusted data during the deserialization process, creating a pathway for privilege elevation attacks. The vulnerability carries a CVSS score of 7.8 (HIGH severity) with a local attack vector, low complexity, and low privilege requirements. An attacker would need existing local access but no user interaction to exploit the flaw, with potential impacts including complete compromise of system confidentiality, integrity, and availability. The EPSS score of 0.005 indicates relatively low prevalence compared to other CVEs, though the FAUCET Risk Score of 49.0 suggests moderate concern. Currently, there is no evidence of active exploitation in the wild, and the vulnerability does not appear on the Known Exploited Vulnerabilities (KEV) catalog. The threat remains on inactive status with limited community attention, suggesting this presents a manageable risk if patching timelines are followed appropriately.