cve-2026-32202

{
  "cvss": 4.3,
  "datePublished": "",
  "dateUpdated": "",
  "description": "Affected: Microsoft / Windows 10, Windows 11, Windows Server | Description: CVE-2026-32202 is a Windows Shell protection mechanism failure that allows a crafted shortcut file to trigger automatic NTLM authentication to an attacker-controlled server, exposing the victim’s authentication data when its containing folder is viewed. | Patched since: 2026/04/14 | Exploitation type: unknown | CWEs: CWE-693 | Origin source: CNW | Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202",
  "dueDate": "",
  "exploited": true,
  "id": "CVE-2026-32202",
  "kev_catalogs": [
    "circl"
  ],
  "knownRansomwareCampaignUse": "",
  "product": "Windows 10, Windows 11, Windows Server",
  "severity": "MEDIUM",
  "source": "circl_kev",
  "title": "CVE-2026-32202",
  "vendor": "Microsoft"
}