CVE-2026-70222: Relative Path Traversal

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83876: Use After Free

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83873: Relative Path Traversal

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83905: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...

PT-2026-112666

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description An issue in Windows Shell allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is no...

PT-2026-112667

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description An incorrect implementation of the authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. Recommendations At the moment, there is ...

PT-2026-112576

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs...

PT-2026-112641

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use after free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption issue that occurs when an application...

PT-2026-112638

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer version...

Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83906: Windows Shell Spoofing Vulnerability

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-83876: Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

VulnCheck KEV: CVE-2026-96951

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-71429 GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

EUVD-2025-211070

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

CVE-2025-71429

Versions of GPT-SoVITS up to and including 20250606v2pro are vulnerable to an OS command injection vulnerability in the tools/uvr5/vr.py component. The root cause is the improper neutralization of special elements, allowing unauthenticated attackers to execute arbitrary commands as the server use...

CVE-2020-37279

easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting shell metacharacters into source paths, destination path, or maxHeap option. Attackers can supply file names or options containing double quotes, semicolons, $ ...

CVE-2026-109331

Network-AI versions 5.14.0 before 5.15.2 contain a security control bypass vulnerability within the ClaudeHookBridge PreToolUse hook . The root cause is that the system matches deny patterns only against the first present candidate field. This allows a prompt-injected agent to bypass security res...

NSPC911 rovr command injection vulnerability

NSPC911 rovr 0.10.3 and earlier versions have a command injection vulnerability. This vulnerability occurs when opening malicious file names on Windows that contain shell metacharacters like "&" via openfile, potentially leading to OS command injection and execution with user privileges...

KDE Dolphin command injection vulnerability

The KDE Dolphin versions 24.08.0 to 26.08.2 have a command injection vulnerability. This vulnerability stems from improper handling of special folder names in the path placeholder. Attackers can embed double quotes and shell metacharacters in directory names, bypassing the quotes in the...