Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202

Microsoft confirmed active exploitation of a high-severity spoofing vulnerability (CVE-2026-32202) in Windows Shell, which could allow attackers to access sensitive information. The flaw was patched in its latest Patch Tuesday update, but malicious actors are already exploiting it in the wild.