EUVD-2026-73629
GHSA-pwv5-626m-p6gg
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-delivered Shell parsing of a crafted file almost certainly requires the victim to open/browse to it (UI:R); unauthenticated with full code-execution impact otherwise.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in the Microsoft Windows Shell component stems from a heap-based buffer overflow (CWE-122) that lets an unauthorized attacker run arbitrary code over a network, per the CVSS vector at full C/I/A impact. The flaw spans essentially the entire supported Windows line - Windows 10 (1607 through 22H2), Windows 11 (23H2 through 26H1), and Windows Server 2012 through 2025 - and Microsoft has shipped patches. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets the Windows Shell's parsing of crafted file/namespace content delivered over a network (e.g., a malicious file on an SMB share, download, or attachment). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H, 9.8) describes a worst-case network, unauthenticated, no-interaction RCE. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft cumulative update for your Windows edition that raises the build to at or above the fixed version listed for that release (for example, 10.0.26100.9445 for Windows 11 24H2, 10.0.20348.5622 for Server 2022, 10.0.17763.9245 for the 1809/Server 2019 branch) - Patch available per vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69829. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Windows 10 (versions 1607-22H2), Windows 11 (versions 23H2-26H1), and Windows Server systems (2012-2025) across your environment; establish a critical patch deployment plan; communicate urgency to system owners. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today