Windows Shell Security Feature Bypass Vulnerability

Severity Important  ·  Urgency Immediate  ·  Exploited in the wild

Why it matters: Exploited in the wild — CISA fix-by 2026-10-16

⏰ Remediate by Oct 16, 2026 · passed 27d ago

Security Feature Bypass · Important · CVSS 8.8 · Exploited in the wild. Affects: Windows Server, Windows 10 Version, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems.

Affected: Windows Server, Windows 10 Version, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems

Related changes

• Windows Kernel Elevation of Privilege Vulnerability · Vulnerability
• Windows Graphics Component Elevation of Privilege Vulnerability · Vulnerability
• Windows Win32k Elevation of Privilege Vulnerability · Vulnerability
• Windows GDI Information Disclosure Vulnerability · Vulnerability
• Win32k Information Disclosure Vulnerability · Vulnerability
• Windows Rich Text Edit Control Remote Code Execution Vulnerability · Vulnerability

Change history

View at Microsoft → Copy summary