Vulnerability Details CVE-2026-96951
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 8.8
Proposed Action
Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.
Ransomware Campaign
Unknown