41793 matches found
CVE-2026-32225
CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...
CVE-2026-32151 Windows Shell Information Disclosure Vulnerability
...
CVE-2026-32151
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...
CVE-2026-32151 Windows Shell Information Disclosure Vulnerability
...
CVE-2026-32151
CVE-2026-32151 is a Windows Shell information disclosure vulnerability. The entry shows a network-based exploit with low privileges required and no user interaction, and a high impact on confidentiality (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6.5). The official fix is noted as ...
CVE-2026-32202
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32202 Windows Shell Spoofing Vulnerability
...
CVE-2026-32202 Windows Shell Spoofing Vulnerability
...
CVE-2026-32202
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32202
CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...
CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-27918
CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...
CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-26166
CVE-2026-26166 is a Windows Shell vulnerability described as a double free in the Shell that allows an authorized attacker to locally elevate privileges. Public materials consistently label it as a Windows Shell elevation of privilege issue, with impact limited to local privileges. The Red Hat/NC...
CVE-2026-26165 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-26165 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-26165
CVE-2026-26165 is a Windows Shell elevation-of-privilege vulnerability. The record shows local access required (attack vector: LOCAL), with low privileges required and no user interaction, and maintains the same security scope. The impact is high on confidentiality, integrity, and availability, w...
Windows Shell Security Feature Bypass Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...