Skip to content
OpenAdvisories
High 1 exploited CVE MSRC-CVE-2026-21510 1 CVE

Windows Shell Security Feature Bypass Vulnerability

Published Feb 10, 2026 · Updated Feb 10, 2026

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
To successfully exploit this vulnerability, an attacker must convince a user to open a malicious link or shortcut file.

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker could bypass Windows SmartScreen and Windows Shell security prompts by exploiting improper handling in Windows Shell components, allowing attacker‑controlled content to execute without user warning or consent.

Security updates
10.0.17763.8389 — https://support.microsoft.com/help/5075904
10.0.20348.4773 — https://support.microsoft.com/help/5075906
10.0.20348.4711 — https://support.microsoft.com/help/5075943
10.0.19044.6937 — https://support.microsoft.com/help/5075912
10.0.26100.32370 — https://support.microsoft.com/help/5075899
10.0.26100.32313 — https://support.microsoft.com/help/5075942
10.0.26200.7840 — https://support.microsoft.com/help/5077181
10.0.26200.7781 — https://support.microsoft.com/help/5077212
10.0.22631.6649 — https://support.microsoft.com/help/5075941
10.0.25398.2149 — https://support.microsoft.com/help/5075897
10.0.14393.8868 — https://support.microsoft.com/help/5075999
6.2.9200.25923 — https://support.microsoft.com/help/5075971
6.3.9600.23022 — https://support.microsoft.com/help/5075970
10.0.28000.1575 — https://support.microsoft.com/help/5077179

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References