Known Vulnerabilities for Windows Shell by Microsoft Corporation
Listed below are 10 of the newest known vulnerabilities associated with "Windows Shell" by "Microsoft Corporation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-81579 json | In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit ... | Not Provided | 2026-08-27 | 2026-08-28 |
| CVE-2026-73414 json | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/win/cm... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-65590 json | n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/compu... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-62770 json | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. | Not Provided | 2026-08-11 | 2026-08-16 |
| CVE-2026-55201 json | Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the download_dir() function that ... | Not Provided | 2026-06-17 | 2026-07-14 |
| CVE-2026-49492 json | Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate... | Not Provided | 2026-06-05 | 2026-06-05 |
| CVE-2026-49481 json | UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device ... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-49402 json | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:child_process implementation provided... | Not Provided | 2026-06-23 | 2026-06-25 |
| CVE-2026-49255 json | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm construc... | Not Provided | 2026-08-19 | 2026-08-25 |
| CVE-2026-47827 json | Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands v... | Not Provided | 2026-08-21 | 2026-08-22 |