CVE-2026-96951

The Windows Shell is vulnerable to a security feature bypass (CVE-2026-96951) caused by improper neutralization of special elements used in a command (command injection). This flaw affects Windows 10 , Windows 11 , and certain Server versions , and was also identified in Outlook.com cloud service...

CVE-2026-83905

The Windows Shell is affected by an information disclosure vulnerability where sensitive system information is exposed to an unauthorized control sphere. This allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . No specific exploit details...

CVE-2026-83873

A Relative path traversal vulnerability exists in Windows Shell , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-23 . While the documents confirm the existence of the vulnerability and the potential for privilege elevation, s...

CVE-2026-85936

A Double free vulnerability in the Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is categorized under CWE-415 (Double Free) and CWE-122 (Heap-based Buffer Overflow). The issue results in High severity impacts on confidentiality, integri...

CVE-2026-83906

The Windows Shell is susceptible to a vulnerability due to an incorrect implementation of authentication algorithm . This flaw allows an unauthorized attacker to perform spoofing over a network . The CVSS 3.1 score is 6.5 (Medium) , with a high impact on confidentiality. Remediation is available ...

CVE-2026-70222

A Relative path traversal vulnerability exists in Windows Shell . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-23 . No specific exploit information or specific internal component details are provided in the documentation.

CVE-2026-83876

A Use after free vulnerability in Windows Shell allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized as having a high severity with a CVSS 3.1 score of 7.8 . No specific versions, root causes, or exploit details are provided in the documents. Rem...

CVE-2026-83782

A Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS v3.1 score of 9.8 . The impact includes the execution of arbitrary code , potentially allowing malicious actors to imper...

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Shell Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

Windows Shell Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Shell Spoofing Vulnerability

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

Windows Shell Remote Code Execution Vulnerability

Double free in Windows Shell allows an unauthorized attacker to execute code over a network...

Windows Shell Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

PT-2026-112315

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue exists in Windows Shell. This flaw allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

CVE-2026-85936: Double Free

Double free in Windows Shell allows an unauthorized attacker to execute code over a network...

PT-2026-112638

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer version...