CVE-2026-32202

CVE-2026-32202 is a protection mechanism failure in Windows Shell that enables spoofing attacks over a network, affecting Windows operating systems and related shell components. The vulnerability has a CVSS score of 4.3 (Medium severity) with a network-based attack vector requiring minimal complexity and no special privileges, though user interaction is necessary for exploitation. The attack has limited impact, resulting only in confidentiality compromise without affecting system integrity or availability. This vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog and shows minimal community attention with an EPSS score of 0.00068, indicating very low real-world exploitation probability. Organizations should prioritize patching higher-severity vulnerabilities but should still apply updates for this flaw as part of regular maintenance cycles.