CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
AnalysisAI
Windows Shell security feature bypass enables unauthenticated remote attackers to defeat protection mechanisms across all supported Windows client and server versions (Windows 10 1607 through Windows 11 26H1, Server 2012 through Server 2025) via network-based attack requiring user interaction. The CVSS 8.8 rating reflects complete compromise potential (high confidentiality, integrity, and availability impact) despite low attack complexity. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all Windows systems (client and server versions 10 1607 through 11 26H1, Server 2012 through Server 2025) in your environment and verify current patch levels. Within 7 days: Deploy Microsoft's released patch to all non-production systems and conduct testing; establish rollout schedule for production systems. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-22613
GHSA-gw5p-hrxr-924m