CVE-2026-26165

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-32225 Windows Shell Security Feature Bypass Vulnerability

...

CVE-2026-32225

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-32225 Windows Shell Security Feature Bypass Vulnerability

...

CVE-2026-32151

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...

CVE-2026-32151 Windows Shell Information Disclosure Vulnerability

...

CVE-2026-32151 Windows Shell Information Disclosure Vulnerability

...

CVE-2026-32151

CVE-2026-32151 is a Windows Shell information disclosure vulnerability. The entry shows a network-based exploit with low privileges required and no user interaction, and a high impact on confidentiality (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6.5). The official fix is noted as ...

CVE-2026-32202

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-32202

CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...

CVE-2026-32202 Windows Shell Spoofing Vulnerability

...

CVE-2026-32202

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-32202 Windows Shell Spoofing Vulnerability

...

CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-27918

CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...

CVE-2026-26166

CVE-2026-26166 is a Windows Shell vulnerability described as a double free in the Shell that allows an authorized attacker to locally elevate privileges. Public materials consistently label it as a Windows Shell elevation of privilege issue, with impact limited to local privileges. The Red Hat/NC...

CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability

...