SB2026021055 - Security feature bypass vulnerability in Windows Shell

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026021055

SB2026021055 - Security feature bypass vulnerability in Windows Shell

Published: February 10, 2026

Security Bulletin ID SB2026021055
CSH Severity
Critical
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Protection Mechanism Failure (CVE-ID: CVE-2026-21510)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red


The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient implementation of security measures. An attacker can trick the victim into clicking on a specially crafted URL or shortcut file to bypass Windows SmartScreen and Windows Shell security prompts and execute arbitrary code on the system.

Note, the vulnerability is being actively exploited in the wild.


Remediation

Install update from vendor's website.

References