← All advisories

Medium severity5.5NVD Advisory· Published Apr 14, 2026· Updated Apr 20, 2026

CVE-2026-32216

CVE-2026-32216

Description

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally.

Affected products

3

Microsoft/Windows 11 26h12 versions
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*range: <10.0.28000.1836
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*range: <10.0.28000.1836
Windows/Redirected Drive Bufferingllm-create

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32216nvdVendor Advisory

News mentions

1

Patch Tuesday - April 2026
Rapid7 Blog · Apr 14, 2026