Microsoft Confirms Active Exploitation of CVE-2026-32202 Credential Theft Vulnerability in Windows

Microsoft updated its security bulletin for CVE-2026-32202 to confirm active exploitation of the vulnerability, which enables credential theft on Windows systems. The flaw was disclosed without a specified disclosure date, but its exploitation in the wild has been officially acknowledged by Microsoft. No technical details about the attack vector or affected Windows versions were provided in the notice. The primary impact involves unauthorized access to user credentials, though the scope of affected systems remains unclear. The advisory emphasizes the urgency of addressing the vulnerability due to confirmed malicious activity.