CVE-2026-102868: Windows Shell Information Disclosure Vulnerability

Q: Who can exploit this issue?

An attacker must already be authorized on the affected Windows 11 system and have local access. The vulnerability does not describe remote exploitation or a requirement for user interaction.

Q: What is the likely impact if exploited?

Successful exploitation can disclose sensitive system information. The supplied severity vector indicates confidentiality impact is high, while integrity and availability impact are not indicated.

Q: How should organizations prioritize remediation?

Prioritize affected Windows 11 systems where lower-privileged authorized users can log on locally or where sensitive system information could help further attacks. The provided data does not identify affected builds, patches, or mitigations.

Published Nov 10, 2026

Updated

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

Other sources

Windows Shell Information Disclosure Vulnerability

— Microsoft

Affected Software

8 affected componentsFixes available

Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501

10.0.28000.3501

Microsoft Windows 11=25H2, >=10.0.26200<10.0.26200.9445

10.0.26200.9445

Microsoft Windows 11=23H2, >=10.0.22631<10.0.22631.7711

10.0.22631.7711

Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501

10.0.28000.3501

Microsoft Windows 11=24H2, >=10.0.26100<10.0.26100.9445

10.0.26100.9445

Microsoft Windows 11=23H2, >=10.0.22631<10.0.22631.7711

10.0.22631.7711

Microsoft Windows 11=25H2, >=10.0.26200<10.0.26200.9445

10.0.26200.9445

Microsoft Windows 11=24H2, >=10.0.26100<10.0.26100.9445

10.0.26100.9445

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3501Patch KB5132059
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7711Patch KB5131087
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9445Patch KB5124008
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9445Patch KB5124008

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:14 PM

Data Sourced

via MITRE·06:14 PM

DescriptionSeverity

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must already be authorized on the affected Windows 11 system and have local access. The vulnerability does not describe remote exploitation or a requirement for user interaction.

What is the likely impact if exploited?

Successful exploitation can disclose sensitive system information. The supplied severity vector indicates confidentiality impact is high, while integrity and availability impact are not indicated.

How should organizations prioritize remediation?

Prioritize affected Windows 11 systems where lower-privileged authorized users can log on locally or where sensitive system information could help further attacks. The provided data does not identify affected builds, patches, or mitigations.

CVE-2026-102868: Windows Shell Information Disclosure Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploited?

How should organizations prioritize remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploited?

How should organizations prioritize remediation?