CVE-2026-32187

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-32187", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "REJECTED", "assignerShortName": "microsoft", "dateReserved": "2026-03-11T00:26:53.426Z", "datePublished": "2026-03-27T20:42:05.339Z", "dateUpdated": "2026-04-15T20:45:55.522Z", "dateRejected": "2026-04-15T20:45:55.522Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-04-15T20:45:55.522Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}]}], "x_generator": {"engine": "Vulnogram 1.0.1"}}}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-32187", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "REJECTED", "assignerShortName": "microsoft", "dateReserved": "2026-03-11T00:26:53.426Z", "datePublished": "2026-03-27T20:42:05.339Z", "dateUpdated": "2026-04-15T20:45:55.522Z", "dateRejected": "2026-04-15T20:45:55.522Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-04-15T20:45:55.522Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}]}], "x_generator": {"engine": "Vulnogram 1.0.1"}}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "id": "CVE-2026-32187", "lastModified": "2026-10-16T14:10:00.120", "metrics": {}, "published": "2026-03-27T21:17:22.950", "references": [], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Rejected"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[1.0.0.0,146.0.3856.84)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "edge_chromium", "vendor": "microsoft"}], "analysis": {"en": {"generated_at": "2026-04-01T05:41:35.318408+00:00", "value": {"mitigation_remediation": ["Apply the latest Microsoft Edge update provided by Microsoft", "Verify that Edge is updated to a version that includes the CVE-2026-32187 fix", "Enable default security settings and avoid installing untrusted extensions"], "summary": {"action": "Immediate Patch", "impact": "Defense bypass in Microsoft Edge (Chromium-based)"}, "threat_synthesis": {"affected_systems": "Microsoft Edge (Chromium-based) is affected. The vulnerability is reported for all supported versions of the browser as it does not list specific versions, implying that any current installation may be susceptible.", "description_and_impact": "The vulnerability allows an attacker to bypass one or more defense layers embedded within Microsoft Edge (Chromium-based). This may compromise the browser's ability to prevent hostile input or malicious content from being processed as intended, possibly exposing the user to unintended code execution or policy violations. The weakness is classified as CWE-1021, which involves array or list boundary attacks or similar manipulation of defensive checks.", "risk_and_exploitability": "The CVSS score of 4.2 indicates moderate overall impact, while the EPSS score of less than 1% suggests a low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalogue, further indicating that public exploitation is either absent or not widespread. The likely attack vector is inferred to be remote, via a malicious web page or content that triggers the defense bypass, although the exact method is not detailed in the available data."}}}}, "created": "2026-03-29T20:30:00.894885+00:00", "updated": "2026-04-02T07:55:22.132265+00:00", "vendors": ["microsoft", "microsoft$PRODUCT$edge_chromium"]}