CVE-2026-96951 · Windows Shell Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

What changed

Security Feature Bypass 10483 · CVSS 8.8. 2.0 · Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.

Technical details

Install the applicable Microsoft security update listed in the MSRC record.

Why it matters

Microsoft marks exploitation as detected, so affected systems require immediate remediation and validation.

Known limitations

Exploited: Yes · Publicly disclosed: No
Affected products and fixed builds remain authoritative in the linked Microsoft record.

Now check

Identify affected products and versions in the MSRC record
Deploy the applicable security update through the normal pilot and production rings
Verify the fixed build and review exploitation guidance after deployment