Executive brief
Windows Shell is the core file and system management interface in Microsoft Windows that handles file operations and user interactions with the operating system. A vulnerability allows an authorized local attacker to manipulate file paths or names in a way that bypasses security restrictions and gain elevated system privileges, potentially enabling complete system compromise or unauthorized access to sensitive data.
Technical details
This vulnerability involves external control of file name or path within Windows Shell, classified as a path traversal or insecure file handling issue. The root cause is improper validation of file paths or names that an attacker can control, allowing them to reference files outside their intended scope or with elevated permissions. The attack requires local access and authenticated user context. An authorized attacker can exploit this to execute code with elevated privileges, potentially gaining SYSTEM-level access. Microsoft has released patches through their standard security update process.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed