Known Vulnerabilities for Windows Shell by Microsoft Corporation
Listed below are 10 of the newest known vulnerabilities associated with "Windows Shell" by "Microsoft Corporation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-107448 json | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a serv... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-106057 json | patool before 4.0.6 contains an OS command injection vulnerability on Windows because shell_quote_nt fails to escape cmd.exe ... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-105791 json | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_sh... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-103473 json | Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell argu... | Not Provided | 2026-09-30 | 2026-10-02 |
| CVE-2026-100844 json | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner).... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100741 json | Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100368 json | CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializations` packages provide speciali... | Not Provided | 2026-09-25 | 2026-09-30 |
| CVE-2026-93012 json | Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a mess... | Not Provided | 2026-09-21 | 2026-09-22 |
| CVE-2026-91006 json | Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by ... | Not Provided | 2026-09-28 | 2026-09-29 |
| CVE-2026-81579 json | In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit ... | Not Provided | 2026-08-27 | 2026-08-28 |