Identity theft vulnerability affecting Microsoft Windows

Microsoft Windows is a family of operating systems developed and marketed by Microsoft. This system is affected by a vulnerability labeled CVE-2026-32202 resulting from a failure of protection mechanisms designed to prevent unauthorized actions on a network. Exploitation of this vulnerability would allow an unauthenticated malicious actor to impersonate a legitimate entity to submit falsified network requests, potentially leading to unauthorized access and manipulation of sensitive data within affected systems. It is classified as medium with a severity score of 4.3 according to CVSS V3.1.

• Versions of Microsoft Windows that do not have the April 2026 security patches, i.e.:;
• Windows 10;
• Version 1607 (x86, x64): versions strictly before 10.0.14393.9060;
• Version 1809 (x86, x64): versions strictly before 10.0.17763.8644;
• Version 21H2 (x86, x64, ARM64): versions strictly prior to 10.0.19044.7184;
• Version 22H2 (x86, x64, ARM64): versions strictly prior to 10.0.19045.7184;
• Windows 11;
• Version 23H2 (x64, ARM64): versions strictly prior to 10.0.22631.6936;
• Version 24H2 (x64, ARM64): versions strictly prior to 10.0.26100.8246;
• Version 25H2 (x64, ARM64): versions strictly prior to 10.0.26200.8246;
• Version 26H1 (x64, ARM64): versions strictly prior to 10.0.28000.1836;
• Windows Server;
• Windows Server 2012 (Standard and R2): all versions;
• Windows Server 2016: versions strictly before 10.0.14393.9060;
• Windows Server 2019: versions strictly before 10.0.17763.8644;
• Windows Server 2022: versions strictly before 10.0.20348.5020;
• Windows Server 2022 (23H2): versions strictly before 10.0.25398.2274;
• Windows Server 2025: versions strictly before 10.0.26100.32690;
• Windows 10 version 21H2 (x86, x64, ARM64);
• Windows 10 version 22H2 (x86, x64, ARM64);