CVE-2026-21510

Name of the Vulnerable Software and Affected Versions Windows Shell (affected versions not specified)

Description A protection mechanism failure in the Windows Shell allows an unauthorized remote attacker to bypass security features, specifically the Windows SmartScreen mechanism and Windows Shell warnings. This bypass can lead to remote code execution, enabling the attacker to execute arbitrary code on the system. Exploitation requires user interaction, where the attacker convinces a user to open a specially crafted shortcut file (.LNK) or follow a malicious link, often via phishing. Real-world exploitation of this issue has been reported.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.