PT-2026-24309 · Microsoft · Windows

Christopher Paschen + 1 · Published 2026-03-10 · Updated 2026-05-29 · CVE-2026-25185

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows (affected versions prior to March 2026 updates)

Description An issue in Windows Shell Link Processing, specifically within the IShellLink interface, involves the exposure of sensitive information due to insufficient protection of service data. This allows an unauthorized remote attacker to perform spoofing over a network. Technical analysis indicates that specific combinations within ExtraData blocks can be used to silently coerce authentication without requiring any user interaction (zero-click).

Recommendations Apply the March 2026 Windows Updates to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-03040

CVE-2026-25185

Affected Products

Windows

References · 19

• https://bdu.fstec.ru/vul/2026-03040 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25185 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25185 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-25185 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25185 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25185 · Security Note
• https://twitter.com/CyberWarship/status/2053832505938125027 · Twitter Post
• https://twitter.com/f1tym1/status/2058910923943731342 · Twitter Post
• https://twitter.com/CVEnew/status/2033361145830965741 · Twitter Post
• https://twitter.com/xcybersecnews/status/2032142286197232100 · Twitter Post
• https://twitter.com/infoflowcloud/status/2033363008802422992 · Twitter Post
• https://twitter.com/vuln_tracker/status/2032264759513686482 · Twitter Post
• https://twitter.com/ET_Labs/status/2033658693338992932 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1tqx9d4/micropatches_released_for_windows_shell_link · Reddit Post
• https://twitter.com/0patch/status/2058914664256311572 · Twitter Post