CVE-2026-32151

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...

CVE-2026-27918

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-26166

Double free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-26165

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-32225

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-32225 Windows Shell Security Feature Bypass Vulnerability

...

CVE-2026-32225 Windows Shell Security Feature Bypass Vulnerability

...

CVE-2026-32151

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...

CVE-2026-32151 Windows Shell Information Disclosure Vulnerability

...

CVE-2026-32151 Windows Shell Information Disclosure Vulnerability

...

CVE-2026-32151

CVE-2026-32151 is a Windows Shell information disclosure vulnerability. The entry shows a network-based exploit with low privileges required and no user interaction, and a high impact on confidentiality (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6.5). The official fix is noted as ...

CVE-2026-32202

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-32202

CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...

CVE-2026-32202

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-27918

CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...

CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-26165 Windows Shell Elevation of Privilege Vulnerability

...