VYPR
High severity7.5NVD Advisory· Published May 12, 2026· Updated Jun 17, 2026

CVE-2026-32161

CVE-2026-32161

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.

Affected products

26
  • cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*+ 7 more
    • cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*range: <10.0.14393.9140
    • cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*range: <10.0.14393.9140
    • cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*range: <10.0.19044.7291
    • cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*range: <10.0.19044.7291
    • cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*range: <10.0.19044.7291
    • cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*range: <10.0.19045.7291
    • cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*range: <10.0.19045.7291
    • cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*range: <10.0.19045.7291
  • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*range: <10.0.17763.8755
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*range: <10.0.17763.8755
  • cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*range: <10.0.22631.7079
    • cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*range: <10.0.22631.7079
  • cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*range: <10.0.26100.8390
    • cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*range: <10.0.26100.8390
  • cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*range: <10.0.26200.8390
    • cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*range: <10.0.26200.8390
  • cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*range: <10.0.28000.2113
    • cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*range: <10.0.28000.2113
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*range: <10.0.25398.2330
  • cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
    Range: <10.0.14393.9140
  • cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
    Range: <10.0.17763.8755
  • cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
    Range: <10.0.20348.5139
  • cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
    Range: <10.0.26100.32772

Patches

Vulnerability mechanics

References

1

News mentions

4