CVE-2026-32177 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.3 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Windows Releases

Platform

Version

Windows 10

1607 (x64)	KB5087065
1809 (x64)	KB5087061
1809 (x64)	KB5087066
21H2 (arm64)	KB5087053
21H2 (x64)	KB5087064
22H2 (x86)	KB5087053
22H2 (x86)	KB5087064

Windows 11

22H2 (x64)	KB5087058
23H2 (x64)	KB5087058
24H2 (x64)	KB5087054
25H2 (arm64, x64)	KB5087051
26H1 (arm64, x64)	KB5087055

Windows Server 2012

Standard	KB5087048
Standard	KB5087062
Standard	KB5087067

Windows Server 2012 R2

Standard	KB5087049
Standard	KB5087063
Standard	KB5087069

Windows Server 2022

Standard	KB5087059
Standard	KB5087068

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Vulnerability Media Exposure

[ENGLISH] Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days
Today is Microsoft's May 2026 Patch Tuesday, with security updates for 120 flaws and no zero-days disclosed this month. [...]
Published: 2026-05-12T14:08:06-04:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32177