CVE-2026-96951

The Windows Shell is vulnerable to a security feature bypass (CVE-2026-96951) caused by improper neutralization of special elements used in a command (command injection). This flaw affects Windows 10 , Windows 11 , and certain Server versions , and was also identified in Outlook.com cloud service...

EUVD-2026-100041

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...

CVE-2026-83905

The Windows Shell is affected by an information disclosure vulnerability where sensitive system information is exposed to an unauthorized control sphere. This allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . No specific exploit details...

EUVD-2026-100030

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83873

A Relative path traversal vulnerability exists in Windows Shell , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-23 . While the documents confirm the existence of the vulnerability and the potential for privilege elevation, s...

EUVD-2026-99634

Double free in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-85936

A Double free vulnerability in the Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is categorized under CWE-415 (Double Free) and CWE-122 (Heap-based Buffer Overflow). The issue results in High severity impacts on confidentiality, integri...

CVE-2026-83906

The Windows Shell is susceptible to a vulnerability due to an incorrect implementation of authentication algorithm . This flaw allows an unauthorized attacker to perform spoofing over a network . The CVSS 3.1 score is 6.5 (Medium) , with a high impact on confidentiality. Remediation is available ...

EUVD-2026-99431

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70222

A Relative path traversal vulnerability exists in Windows Shell . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-23 . No specific exploit information or specific internal component details are provided in the documentation.

EUVD-2026-99415

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-99398

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83876

A Use after free vulnerability in Windows Shell allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized as having a high severity with a CVSS 3.1 score of 7.8 . No specific versions, root causes, or exploit details are provided in the documents. Rem...

EUVD-2026-99365

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-83782

A Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS v3.1 score of 9.8 . The impact includes the execution of arbitrary code , potentially allowing malicious actors to imper...

CVE-2026-110237

Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...

CVE-2026-110236

KDE Dolphin versions 24.08.0 through 26.08.2 are vulnerable to an OS command injection (CWE-78). The vulnerability exists because the application fails to properly neutralize shell metacharacters in directory names when they are substituted into a {path} placeholder. Specifically, an attacker can...

CVE-2026-110236 KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110233 rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe

Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opene...

CVE-2026-110206

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...