Microsoft CVE-2026-32222

Apply Microsoft security updates immediately to patch this vulnerability. Vendor-released patches fix the issue in Windows 11 Version 24H2 build 10.0.26100.32690 or later, Windows 11 Version 25H2 build 10.0.26200.8246 or later, Windows 11 Version 26H1 build 10.0.28000.1836 or later, and Windows Server 2025 build 10.0.26100.32690 or later (applies to both standard and Server Core installations). Organizations should deploy patches through Windows Update, WSUS, or enterprise patch management solutions. Consult the official Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32222 for specific KB article numbers and deployment guidance. No effective workarounds exist for kernel-level vulnerabilities; patching is the only complete remediation. For systems requiring delayed patching, implement compensating controls including restricting local logon permissions to trusted users only, enabling enhanced security monitoring for unusual privilege escalation attempts via Windows Defender ATP or EDR solutions, and applying principle of least privilege to limit accounts with local interactive logon rights. Additional technical details available through ENISA EUVD-2026-22610 at https://nvd.nist.gov/vuln/detail/CVE-2026-32222.