Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Microsoft has update their advisory to note this vulnerability has been exploited in the wild. Patches are available and should be applied immediately

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
    (CVE-2026-26171)

  - Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing
    over a network. (CVE-2026-32178)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a
    network. (CVE-2026-32202)

  - Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an
    unauthorized attacker to deny service over a network. (CVE-2026-33116)

The remote Windows host is missing security update 5082063. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082200. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082142. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082126. It is, therefore, affected by multiple vulnerabilities

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

  - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows     TCP/IP allows an unauthorized attacker to execute code over a network. (CVE-2026-33827)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082052. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5083768. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5083769. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082060. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082123. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082127. It is, therefore, affected by multiple vulnerabilities

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

  - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows     TCP/IP allows an unauthorized attacker to execute code over a network. (CVE-2026-33827)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5082198. It is, therefore, affected by multiple vulnerabilities

  - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
    (CVE-2026-33824)

  - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature     over a network. (CVE-2026-32225)

  - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
    (CVE-2026-32157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
440466	Alpine: multiple aspnetcore9-runtime packages, multiple dotnet-host packages: security update to 9.0.15-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
440466	Alpine: multiple aspnetcore9-runtime packages, multiple dotnet-host packages: security update to 9.0.15-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
440465	Alpine: multiple aspnetcore8-runtime packages, multiple dotnet-host packages: security update to 8.0.26-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
440465	Alpine: multiple aspnetcore8-runtime packages, multiple dotnet-host packages: security update to 8.0.26-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
440437	Alpine: multiple aspnetcore10-runtime packages, multiple dotnet-host packages: security update to 10.0.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
440437	Alpine: multiple aspnetcore10-runtime packages, multiple dotnet-host packages: security update to 10.0.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
306454	KB5082063: Windows Server 2025 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	medium
306450	KB5082200: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306449	KB5082142: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306448	KB5082126: Windows Server 2012 R2 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306443	KB5082052: Windows 11 version 23H2 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306439	KB5083768: Windows 11 Version 26H1 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306438	KB5083769: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	medium
306437	KB5082060: Windows Server version 23H2 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306436	KB5082123: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306433	KB5082127: Windows Server 2012 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high
306431	KB5082198: Windows 10 Version 1607 / Windows Server 2016 Security Update (April 2026)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2026-32202

medium

Tenable Plugins

high

high

high

high

high

high

medium

high

high

high

high

high

medium

high

high

high

high