PatchaPalooza

CVE-2026-32151: Windows Shell Information Disclosure Vulnerability

CVE-2026-32151 is an information disclosure vulnerability in Windows Shell, rated Important by Microsoft, with a CVSS 3.1 base score of 6.5 (Medium). An attacker can exploit it remotely over the network, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 0.75% probability of exploitation activity in the next 30 days, higher than 55% of all scored vulnerabilities. Microsoft released the fix on 14 April 2026 in the April 2026 Patch Tuesday, delivered through 11 security updates (KB5082123, KB5082142, KB5082200, KB5082063 and more). It affects 31 products in 2 product families (Windows, ESU).

Key facts

CVE ID
CVE-2026-32151
Severity
Medium CVSS 6.5
Microsoft severity
Important
Impact
Information Disclosure
Exploited in the wild
No
Publicly disclosed
No
Exploitation likelihood
Less Likely
Weakness
CWE-200
EPSS
0.75% (percentile 55%)
CISA KEV
Not listed
Released
Last updated
Patch Tuesday
April 2026 Patch Tuesday
Product families
Windows, ESU

CVSS score and vector

Microsoft scores CVE-2026-32151 at 6.5 (temporal 5.7) using CVSS 3.1. Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

MetricValue
Attack vectorNetwork
Attack complexityLow
Privileges requiredLow
User interactionNone
ScopeUnchanged
Confidentiality impactHigh
Integrity impactNone
Availability impactNone
Exploit code maturityUnproven
Remediation levelOfficial fix
Report confidenceConfirmed

Description

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.

Frequently asked questions (Microsoft)

What type of information could be disclosed by this vulnerability?

The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the local memory address.

Affected products (31)

Windows

ProductSecurity updateTypeFixed buildRestart
Windows 10 Version 1809 for 32-bit SystemsKB5082123Security Update10.0.17763.8644Yes
Windows 10 Version 1809 for x64-based SystemsKB5082123Security Update10.0.17763.8644Yes
Windows Server 2019KB5082123Security Update10.0.17763.8644Yes
Windows Server 2019 (Server Core installation)KB5082123Security Update10.0.17763.8644Yes
Windows Server 2022KB5082142Security Update10.0.20348.5020Yes
Windows Server 2022 (Server Core installation)KB5082142Security Update10.0.20348.5020Yes
Windows 10 Version 21H2 for 32-bit SystemsKB5082200Security Update10.0.19044.7184Yes
Windows 10 Version 21H2 for ARM64-based SystemsKB5082200Security Update10.0.19044.7184Yes
Windows 10 Version 21H2 for x64-based SystemsKB5082200Security Update10.0.19044.7184Yes
Windows Server 2025 (Server Core installation)KB5082063Security Update10.0.26100.32690Yes
Windows 11 Version 25H2 for ARM64-based SystemsKB5083769Security Update10.0.26200.8246Yes
Windows 11 Version 25H2 for x64-based SystemsKB5083769Security Update10.0.26200.8246Yes
Windows 11 Version 23H2 for ARM64-based SystemsKB5082052Security Update10.0.22631.6936Yes
Windows 11 Version 23H2 for x64-based SystemsKB5082052Security Update10.0.22631.6936Yes
Windows Server 2022, 23H2 Edition (Server Core installation)KB5082060Security Update10.0.25398.2274Yes
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows Server 2025KB5082063Security Update10.0.26100.32690Yes
Windows 10 Version 1607 for 32-bit SystemsKB5082198Security Update10.0.14393.9060Yes
Windows 10 Version 1607 for x64-based SystemsKB5082198Security Update10.0.14393.9060Yes
Windows Server 2016KB5082198Security Update10.0.14393.9060Yes
Windows Server 2016 (Server Core installation)KB5082198Security Update10.0.14393.9060Yes
Windows 11 Version 26H1 for ARM64-based SystemsKB5083768Security Update10.0.28000.1836Yes
Windows 11 version 26H1 for x64-based SystemsKB5083768Security Update10.0.28000.1836Yes

ESU

ProductSecurity updateTypeFixed buildRestart
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows Server 2012KB5082127Monthly Rollup6.2.9200.26026Yes
Windows Server 2012 (Server Core installation)KB5082127Monthly Rollup6.2.9200.26026Yes
Windows Server 2012 R2KB5082126Monthly Rollup6.3.9600.23132Yes
Windows Server 2012 R2 (Server Core installation)KB5082126Monthly Rollup6.3.9600.23132Yes

Security updates (11)

NIST NVD data

NVD status
Analyzed
NVD CVSS
6.5 (MEDIUM)
NVD weakness
CWE-200
Published to NVD
NVD last modified

Affected configurations (CPE)

ProductVulnerable versions
windows 10 1607 (x64)before 10.0.14393.9060
windows 10 1607 (x86)before 10.0.14393.9060
windows 10 1809 (x64)before 10.0.17763.8644
windows 10 1809 (x86)before 10.0.17763.8644
windows 10 21h2 (arm64)before 10.0.19044.7184
windows 10 21h2 (x64)before 10.0.19044.7184
windows 10 21h2 (x86)before 10.0.19044.7184
windows 10 22h2 (arm64)before 10.0.19045.7184
windows 10 22h2 (x64)before 10.0.19045.7184
windows 10 22h2 (x86)before 10.0.19045.7184
windows 11 23h2 (arm64)before 10.0.22631.6936
windows 11 23h2 (x64)before 10.0.22631.6936
windows 11 24h2 (arm64)before 10.0.26100.8246
windows 11 24h2 (x64)before 10.0.26100.8246
windows 11 25h2 (arm64)before 10.0.26200.8246
windows 11 25h2 (x64)before 10.0.26200.8246
windows 11 26h1 (arm64)before 10.0.28000.1836
windows 11 26h1 (x64)before 10.0.28000.1836
windows server 2012all listed versions
windows server 2012 r2all listed versions
windows server 2016before 10.0.14393.9060
windows server 2019before 10.0.17763.8644
windows server 2022before 10.0.20348.5020
windows server 2022 23h2before 10.0.25398.2274
windows server 2025before 10.0.26100.32690

References

Acknowledgments

  • Anonymous

Revision history

VersionDateDescription
1.0Information published.

Sources