CVE-2026-32161Disclosure(microsoft / windows_10_1607)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.

microsoft CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32161

Weakness type (CWE)

CWE-362CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2

Threat summary

Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 3 classified signals
Exploit: 1 classified signal
Peaked 3d ago at 2 mentions (2026-05-12); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

microsoft

Products

windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016

2 versions affected across 14 products

Deep dive

Activity timeline6 mentions / 4d

Signal classification4 categories

Disclosure

350.0%

Exploit

116.7%

Patch

116.7%

General

116.7%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-12	2	Disclosure2
2026-05-13	2	Exploit1Patch1
2026-05-15	1	Disclosure1
2026-06-02	1	General1

Full discourse6 posts

mRr3b00t@UK_Daniel_Card148d
Patch
I want to show some cyber reality, we have a tenant here, we have a bunch of statistics and high level info. I've selected a view here on: CVE-2026-32161 The patching of assets will occur relatively rapidly with this (within 14 days) You can see here as well the fact that there is a cone of vulnerability, exploitable and then critical vulnerabilities. not every vulnerability matters... that's something I think some people struggle to understand when it comes to cyber. the point isn't 0 risk.
Post summary
The post highlights an upcoming patch for CVE-2026-32161 within 14 days, lacking specific technical details, PoC, or evidence of exploitation.
43247188.4K
124.1K followersView on X
frostb1te@frostb1ten148d
Exploit
Testing CVE-2026-32161 and successfully triggered a remote BSOD against my laptop over WiFi without requiring access to the same local network. Still surreal seeing a wireless bug crash a machine from proximity alone. https://t.co/cYOGPmMxEA
Post summary
The tweeter reports successfully triggering a remote BSOD via CVE-2026-32161 over WiFi, but provides no code, patch, or evidence of widespread exploitation.
04031835.0K
841 followersView on X
ThreatCluster@threatcluster149d
Disclosure
BREAKING: Microsoft discloses CVE-2026-32161 and CVE-2026-34345 race condition bugs in Windows WiFi Miniport and WinSock drivers enabling adjacent RCE and local privilege escalation. https://threatcluster.io/cluster/multiple-cves-affect-windows-drivers-with-race-condition-vul-627d5e89
Post summary
Microsoft has disclosed CVE-2026-32161 and CVE-2026-34345, race condition vulnerabilities in Windows drivers that could lead to remote code execution and local privilege escalation.
00010130
244 followersView on X
IntegSec@integ_sec128d
General
CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04jMnrV0
Post summary
The text is a title that indicates a discussion of CVE‑2026‑32161 and its business implications, but provides no concrete technical, exploit, or patch details.
0000038
32 followersView on X
Israel@f1tym1146d
Disclosure
CVE-2026-32161 | Microsoft Windows up to Server 2025 Native WiFi Miniport Driver race condition (WID-SEC-2026-1489) https://ift.tt/ihbLCGd A vulnerability classified as critical was found in Microsoft Windows. This affects an unknown function of the component Native WiFi Minip…
Post summary
The text announces CVE-2026-32161, a critical race condition in Microsoft Windows' Native WiFi Miniport Driver, providing an advisory link but no exploit, patch, or active exploitation details.
0000071
974 followersView on X
WindowsForum@windowsforum149d
Disclosure
🚨 CVE-2026-32161 Wi‑Fi miniport RCE is confirmed—aka “your network card may be your attack surface now.” Fast patching matters because exploits love being close and silent. #Windows #Security https://windowsforum.com/threads/cve-2026-32161-wi-fi-miniport-rce-why-confirmed-driver-bugs-need-fast-patching.417894/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #RemoteCodeExecution #PatchManagement https://t.co/0TXhI7yHiS
Post summary
The note confirms a Wi‑Fi miniport RCE vulnerability (CVE‑2026‑32161) and stresses the urgency of patching, without detailing exploit code or active attacks.
0000082
1.1K followersView on X

CPE platform detail25 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

25 of 25 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_10_1607	-	-	x64
OS	microsoft	windows_10_1607	-	-	x86
OS	microsoft	windows_10_1809	-	-	x64
OS	microsoft	windows_10_1809	-	-	x86
OS	microsoft	windows_10_21h2	-	-	arm64
OS	microsoft	windows_10_21h2	-	-	x64
OS	microsoft	windows_10_21h2	-	-	x86
OS	microsoft	windows_10_22h2	-	-	arm64
OS	microsoft	windows_10_22h2	-	-	x64
OS	microsoft	windows_10_22h2	-	-	x86
OS	microsoft	windows_11_23h2	-	-	arm64
OS	microsoft	windows_11_23h2	-	-	x64
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2012	-	-	-
OS	microsoft	windows_server_2012	r2	-	-
OS	microsoft	windows_server_2016	-	-	-
OS	microsoft	windows_server_2019	-	-	-
OS	microsoft	windows_server_2022	-	-	-
OS	microsoft	windows_server_2022_23h2	-	-	-
OS	microsoft	windows_server_2025	-	-	-

Explore more

Back to dashboard microsoft CVEs windows_10_1607 vulnerabilities

What researchers are saying

CVE-2026-32161

mRr3b00t[verified]@UK_Daniel_CardPatch

The post highlights an upcoming patch for CVE-2026-32161 within 14 days, lacking specific technical details, PoC, or evidence of exploitation.

frostb1te[verified]@frostb1tenExploit

The tweeter reports successfully triggering a remote BSOD via CVE-2026-32161 over WiFi, but provides no code, patch, or evidence of widespread exploitation.

ThreatCluster[verified]@threatclusterDisclosure

Microsoft has disclosed CVE-2026-32161 and CVE-2026-34345, race condition vulnerabilities in Windows drivers that could lead to remote code execution and local privilege escalation.

IntegSec[verified]@integ_secGeneral

The text is a title that indicates a discussion of CVE‑2026‑32161 and its business implications, but provides no concrete technical, exploit, or patch details.

Israel[verified]@f1tym1Disclosure

The text announces CVE-2026-32161, a critical race condition in Microsoft Windows' Native WiFi Miniport Driver, providing an advisory link but no exploit, patch, or active exploitation details.

WindowsForum[verified]@windowsforumDisclosure

The note confirms a Wi‑Fi miniport RCE vulnerability (CVE‑2026‑32161) and stresses the urgency of patching, without detailing exploit code or active attacks.