Product
Windows Shell
- First Reported
- Oct 13, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (4)
- CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions. Microsoft Patches More Than 1,400 Security Flaws, Including an Exploited Zero-Day
- CVE-2026-70222 Windows Shell Elevation of Privilege Vulnerability Exploitation Less Likely No 7.8 Microsoft’s October 2026 Patch Tuesday Lists Hundreds of Vulnerabilities
- Both of the zero-days are potentially scary security bypasses. CVE-2026-96951 (CVSS 8.8) is the one under active exploit, found in Windows Shell. The other is CVE-2026-108398, found in .NET Framework Security. Microsoft’s October 2026 Patch Tuesday Fixes 1,413 CVEs, Including Two Zero-Days
- Exploited Zero-Day in Windows Shell Microsoft’s October 2026 Patch Tuesday Fixes 1,413 Vulnerabilities, Including an Exploited Zero-Day
CVE (51)
People (6)
Vendors (1)
Products (28)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.