580 matches found
CVE-2026-69383
CVE-2026-69383 is a local elevation of privilege vulnerability in Windows Shell , caused by external control of file name or path . An authorized attacker with low privileges can exploit this to gain full control over confidentiality, integrity, and availability of the system (CVSS 3.1 base score...
EUVD-2026-73131
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...
EUVD-2026-73081
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70563
CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...
CVE-2026-69528
CVE-2026-69528 is a local privilege escalation vulnerability in Windows Shell caused by missing authentication for a critical function . An authorized attacker (with low privileges, no user interaction required) can exploit this to gain full control over confidentiality, integrity, and availabili...
EUVD-2026-73010
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...
Windows Shell Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
Windows Shell Elevation of Privilege Vulnerability
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
Windows Shell Spoofing Vulnerability
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
Windows Shell Elevation of Privilege Vulnerability
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
Windows Shell Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...
Windows Shell Elevation of Privilege Vulnerability
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69829: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
CVE-2026-69392: Use After Free
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69528: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-87608
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use-after-free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...
PT-2026-87748
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
CVE-2026-70563: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...