CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Shell Command Injection and Security Feature Bypass (CVE-2026-96951) Advisory
[Affected Scope] All supported versions of Windows OS including Windows 10, 11, and Windows Server.
[Impact] Unauthorized attackers can bypass security features and execute arbitrary commands, leading to full system compromise.
[Mitigation] Apply the latest Microsoft security updates immediately and restrict execution of untrusted URI handlers.
Windows Shell Protection Mechanism Failure and Network Spoofing Vulnerability (CVE-2026-32202) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the Windows Shell component
[Impact] Unauthorized remote attackers can bypass security warnings to perform network-based spoofing, potentially leading to credential harvesting or malware delivery
[Mitigation] Apply the official Microsoft security updates immediately and restrict outbound SMB/WebDAV traffic
Microsoft Windows Shell Security Feature Bypass Vulnerability (CVE-2026-21510) Urgent Security Advisory
[Affected Scope] Windows Shell component across Microsoft Windows operating systems
[Impact] Unauthorized network attackers can bypass critical security boundaries, potentially leading to arbitrary code execution via user interaction
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict outbound SMB/WebDAV traffic
Windows Shell Remote Code Execution Vulnerability via Improper File Path Validation (CVE-2018-8414)
[Affected Scope] Windows 10 and Windows Server operating systems
[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted file
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of untrusted setting files
Microsoft Windows Shell LNK Remote Code Execution Vulnerability (CVE-2017-8464) Analysis and Mitigation Guide
[Affected Scope] All end-of-life and legacy operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Attackers can execute arbitrary code with the privileges of the local user simply by having the user open a folder containing a crafted .LNK file, without requiring any execution or double-click
[Mitigation] Apply official Microsoft security patches immediately, disable Autorun features, and restrict access to untrusted removable media and network shares