Microsoft Issues Emergency Security Updates for CVE-2026-32775

Microsoft has released critical security updates to address CVE-2026-32775, a severe vulnerability that could allow attackers to execute arbitrary code on affected systems. The vulnerability affects multiple Windows operating systems and carries a CVSS score of 9.8 out of 10.

What's Affected

The vulnerability impacts the following Microsoft products:

• Windows 10 (all versions)
• Windows 11 (all versions)
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025

Severity and Risk

CVE-2026-32775 allows remote code execution without authentication. An attacker could exploit this vulnerability by sending a specially crafted request to an affected system, potentially gaining complete control over the affected machine.

Immediate Actions Required

Microsoft strongly recommends:

1. Install updates immediately - Available through Windows Update
2. Enable automatic updates if not already active
3. Verify installation by checking update history
4. Restart systems as required for updates to take effect

Update Availability

Security updates are available now through:

• Windows Update (recommended)
• Microsoft Update Catalog
• WSUS for enterprise environments

Technical Details

The vulnerability exists in the Windows Remote Procedure Call (RPC) service. Attackers could exploit this flaw to execute malicious code with system privileges, potentially leading to:

• Data theft or corruption
• Installation of malware
• Creation of new administrator accounts
• Complete system compromise

Timeline

• April 14, 2026: Vulnerability discovered by Microsoft security researchers
• April 21, 2026: Patches developed and tested
• April 28, 2026: Public release of security updates

Additional Resources

For more information, visit:

• Microsoft Security Update Guide
• CVE-2026-32775 Details
• MSRC Blog Post

Enterprise Considerations

Organizations should:

• Prioritize patching critical infrastructure
• Test updates in non-production environments first
• Monitor systems for unusual activity
• Review incident response procedures

No Known Exploits

As of publication, Microsoft reports no evidence of active exploitation in the wild. However, given the severity, attackers are expected to develop exploits rapidly.

Support

For technical assistance:

• Enterprise customers: Contact Microsoft Support
• Individual users: Visit Microsoft Community Forums
• Security professionals: Report through MSRC portal

Microsoft emphasizes that keeping systems updated remains the most effective defense against emerging threats. Organizations unable to immediately apply updates should implement additional monitoring and restrict network access to vulnerable systems until patches can be deployed.