Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
Successfully exploiting this vulnerability could allow an attacker to bypass network security protections that rely on Fully Qualified Domain Name (FQDN)‑based rules, such as policies that block or allow network connections based on domain names. This could reduce the effectiveness of security features that depend on those domain‑based network controls.
According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?
Successful exploitation allows limited tampering with security configuration (low integrity impact) but does not expose sensitive data or disrupt system availability. In short, the vulnerability weakens specific security enforcement controls without causing data disclosure or service outages.
Security updates
10.0.17763.8755 — https://support.microsoft.com/help/5087538
10.0.20348.5139 — https://support.microsoft.com/help/5087545
10.0.20348.5074 — https://support.microsoft.com/help/5087424
10.0.19044.7291 — https://support.microsoft.com/help/5087544
10.0.19045.7417 — https://support.microsoft.com/help/5094127
10.0.26100.32860 — https://support.microsoft.com/help/5087539
10.0.26100.32772 — https://support.microsoft.com/help/5087423
10.0.26200.8457 — https://support.microsoft.com/help/5089549
10.0.26200.8390 — https://support.microsoft.com/help/5089466
10.0.22631.7079 — https://support.microsoft.com/help/5087420
10.0.22631.7219 — https://support.microsoft.com/help/5093998
10.0.25398.2330 — https://support.microsoft.com/help/5087541
10.0.28000.2113 — https://support.microsoft.com/help/5089548
10.0.14393.9140 — https://support.microsoft.com/help/5087537
6.2.9200.26079 — https://support.microsoft.com/help/5087470
6.3.9600.23181 — https://support.microsoft.com/help/5087471
Vulnerabilities 1
-
Medium 4.4
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-32209 Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32209
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss