Executive brief
Windows Shell, a core component of the Windows operating system that manages file navigation and access, contains a flaw in how it resolves symbolic links and shortcuts. An attacker can exploit this to create spoofed files or directories that deceive users into accessing malicious content, potentially leading to credential theft, malware execution, or data compromise over a network.
Technical details
The vulnerability is a link-following flaw (CWE-59) in Windows Shell's file access resolution logic. An attacker can craft specially-designed symbolic links or junction points that bypass proper path validation, causing the Shell to resolve links to unintended targets and display spoofed file metadata or content to users. The attack is network-accessible if the target system mounts attacker-controlled shares or downloads manipulated link files. No authentication is required for exploitation. The attacker can achieve spoofing attacks that trick users into trusting or executing malicious resources, or disclose file locations outside the intended scope.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed