CISA Warns Microsoft Windows Shell 0-click Vulnerability Exploited in Attacks

On April 28, 2026 CISA added CVE-2026-32202—a critical zero-day in the Microsoft Windows Shell that enables network spoofing and active in-the-wild exploitation—to its Known Exploited Vulnerabilities catalog, issuing a binding May 12, 2026 remediation deadline for federal agencies and urging all organizations to immediately apply vendor mitigations, patch affected systems, and monitor for spoofing attempts.