{"cvss":4.3,"datePublished":"","dateUpdated":"","description":"Affected: Microsoft / Windows 10, Windows 11, Windows Server | Description: CVE-2026-32202 is a Windows Shell protection mechanism failure that allows a crafted shortcut file to trigger automatic NTLM authentication to an attacker-controlled server, exposing the victim’s authentication data when its containing folder is viewed. | Patched since: 2026/04/14 | Exploitation type: unknown | CWEs: CWE-693 | Origin source: CNW | Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202","dueDate":"","exploited":true,"id":"CVE-2026-32202","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Windows 10, Windows 11, Windows Server","severity":"MEDIUM","source":"circl_kev","title":"CVE-2026-32202","vendor":"Microsoft"}