Known Vulnerabilities for Windows Shell by Microsoft Corporation
Listed below are 10 of the newest known vulnerabilities associated with "Windows Shell" by "Microsoft Corporation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110233 json | Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by cr... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-107448 json | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a serv... | Not Provided | 2026-10-08 | 2026-10-10 |
| CVE-2026-106057 json | patool before 4.0.6 contains an OS command injection vulnerability on Windows because shell_quote_nt fails to escape cmd.exe ... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-105791 json | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_sh... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-104024 json | Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pa... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-103473 json | Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell argu... | Not Provided | 2026-09-30 | 2026-10-02 |
| CVE-2026-100844 json | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner).... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100741 json | Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100368 json | CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializations` packages provide speciali... | Not Provided | 2026-09-25 | 2026-09-30 |
| CVE-2026-96951 json | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized a... | Not Provided | 2026-10-13 | 2026-10-16 |