Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.
Details
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
To successfully exploit this vulnerability, an attacker must convince a user to open a malicious link or shortcut file.
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker could bypass Windows SmartScreen and Windows Shell security prompts by exploiting improper handling in Windows Shell components, allowing attacker‑controlled content to execute without user warning or consent.
Security updates
10.0.17763.8389 — https://support.microsoft.com/help/5075904
10.0.20348.4773 — https://support.microsoft.com/help/5075906
10.0.20348.4711 — https://support.microsoft.com/help/5075943
10.0.19044.6937 — https://support.microsoft.com/help/5075912
10.0.26100.32370 — https://support.microsoft.com/help/5075899
10.0.26100.32313 — https://support.microsoft.com/help/5075942
10.0.26200.7840 — https://support.microsoft.com/help/5077181
10.0.26200.7781 — https://support.microsoft.com/help/5077212
10.0.22631.6649 — https://support.microsoft.com/help/5075941
10.0.25398.2149 — https://support.microsoft.com/help/5075897
10.0.14393.8868 — https://support.microsoft.com/help/5075999
6.2.9200.25923 — https://support.microsoft.com/help/5075971
6.3.9600.23022 — https://support.microsoft.com/help/5075970
10.0.28000.1575 — https://support.microsoft.com/help/5077179
Vulnerabilities 1
-
High 8.8
Windows Shell Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
KEV Feb 10, 2026
Revision history
-
#1
Information published.
References
-
CVE-2026-21510 Windows Shell Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss