CVE-2026-32224

CVE-2026-32224 is a use-after-free vulnerability in Windows Server Update Service that permits authorized local users to achieve privilege escalation on affected systems. The flaw resides in memory management within the WSUS component and can be exploited by attackers with limited privileges already present on a target machine. The vulnerability carries a CVSS score of 7.0 (HIGH) with a local attack vector, high attack complexity, and low privileges required. Successful exploitation could result in high-impact consequences across confidentiality, integrity, and availability. The EPSS score of 0.00045 indicates relatively low probability of exploitation in the wild compared to other publicly disclosed CVEs. Currently, there is no evidence of active exploitation in the wild, as the vulnerability is not present on Microsoft's Known Exploited Vulnerabilities list and shows no community attention on the Hot List. However, organizations should still prioritize patching given the high CVSS severity and the potential for privilege escalation attacks in environments where multiple users have local access to Windows Server systems.