High · published October 13, 2026
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 74.3th percentile for exploit probability.
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/outlook_web | all versions | — |
| microsoft/windows_10_1607 | < 10.0.14393.9612 | 10.0.14393.9612 |
| microsoft/windows_10_1607 | < 10.0.14393.9612 | 10.0.14393.9612 |
| microsoft/windows_10_1809 | < 10.0.17763.9376 | 10.0.17763.9376 |
| microsoft/windows_10_1809 | < 10.0.17763.9376 | 10.0.17763.9376 |
| microsoft/windows_10_21h2 | < 10.0.19044.7807 | 10.0.19044.7807 |
| microsoft/windows_10_21h2 | < 10.0.19044.7807 | 10.0.19044.7807 |
| microsoft/windows_10_21h2 | < 10.0.19044.7807 | 10.0.19044.7807 |
| microsoft/windows_10_22h2 | < 10.0.19045.7807 | 10.0.19045.7807 |
| microsoft/windows_10_22h2 | < 10.0.19045.7807 | 10.0.19045.7807 |
| microsoft/windows_10_22h2 | < 10.0.19045.7807 | 10.0.19045.7807 |
| microsoft/windows_11_23h2 | < 10.0.22631.7652 | 10.0.22631.7652 |
| microsoft/windows_11_23h2 | < 10.0.22631.7652 | 10.0.22631.7652 |
| microsoft/windows_11_24h2 | < 10.0.26100.9711 | 10.0.26100.9711 |
| microsoft/windows_11_24h2 | < 10.0.26100.9711 | 10.0.26100.9711 |
| microsoft/windows_11_25h2 | < 10.0.26200.9711 | 10.0.26200.9711 |
| microsoft/windows_11_25h2 | < 10.0.26200.9711 | 10.0.26200.9711 |
| microsoft/windows_11_26h1 | < 10.0.28000.3231 | 10.0.28000.3231 |
| microsoft/windows_11_26h1 | < 10.0.28000.3231 | 10.0.28000.3231 |
| microsoft/windows_11_26h2 | < 10.0.26300.9711 | 10.0.26300.9711 |
| microsoft/windows_11_26h2 | < 10.0.26300.9711 | 10.0.26300.9711 |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.9612 | 10.0.14393.9612 |
| microsoft/windows_server_2019 | < 10.0.17763.9376 | 10.0.17763.9376 |
| microsoft/windows_server_2022 | < 10.0.20348.5761 | 10.0.20348.5761 |
| microsoft/windows_server_2025 | < 10.0.26100.33650 | 10.0.26100.33650 |