This vulnerability (CVE-2026-32202) involves a protection mechanism failure classified under CWE-693 in the Windows Shell component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It enables an unauthorized attacker to conduct spoofing attacks over a network. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low complexity, no privileges required, and user interaction needed. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker can exploit this vulnerability to spoof network communications, potentially misleading users or systems by impersonating legitimate entities. The impact is limited to confidentiality as indicated by the CVSS vector (C:L/I:N/A:N), meaning information disclosure is possible but integrity and availability are not affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update for Windows 10 Version 1607 (build 10.0.14393.0) as provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202. Applying this patch will remediate the vulnerability.