What is the CVSS score of EUVD-2026-29575?

EUVD-2026-29575 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for EUVD-2026-29575?

Yes, a patch is available for EUVD-2026-29575. Update the affected software to the latest version immediately.

Microsoft EUVD-2026-29575

| CVE-2026-32209 MEDIUM

Improper Access Control (CWE-284)

2026-05-12 microsoft

GHSA-c5mq-9w9m-247v

Authentication Bypass Microsoft

4.4

CVSS 3.1 · NVD

Temporal: 3.9

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CIRCL (temporal)

3.9 LOW

cvss

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

May 12, 2026 - 16:59 nvd

MEDIUM 4.4

DescriptionCVE.org

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

Analysis

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

Same weakness CWE-284 – Improper Access Control

View all

CVE-2012-4681 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2012-1723 CRITICAL POC

9.8

CVE-2012-5076 CRITICAL POC

9.8

CVE-2014-3120 HIGH POC

8.1

CVE-2013-2423 LOW POC

3.7

CVE-2016-3427 CRITICAL

9.8

CVE-2025-12480 CRITICAL POC

9.1

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2012-1723 CRITICAL POC

9.8

CVE-2017-10271 HIGH POC

7.5

CVE-2015-1427 CRITICAL POC

9.8

CVE-2025-3248 CRITICAL POC

9.8

EUVD-2026-29575 vulnerability details – vuln.today

Back