Executive brief
Windows Shell, a core Windows operating system component responsible for user interface and command execution, contains a missing authentication check on a critical function. An authorized local user can exploit this vulnerability to gain elevated system privileges, potentially allowing them to take complete control of the affected machine, access sensitive data, or install malware.
Technical details
This vulnerability is a local privilege escalation in Windows Shell stemming from insufficient authentication enforcement on a critical function. The vulnerability requires an authorized local user with valid credentials; it cannot be exploited remotely over the network. By bypassing the missing authentication control, an attacker can elevate their privileges to a higher level (such as SYSTEM or Administrator), gaining full control over the system. A patch is available via Microsoft security updates.
Affected products
- Microsoft Windows Shell <UNKNOWN>
Timeline
- 2026-09-08: disclosed