CVE-2026-69383: Windows Shell Elevation of Privilege Vulnerability

Published Sep 8, 2026

Updated

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.

Affected Software

1 affected component

Microsoft Windows Shell

Event History

Sep 8, 2026

CVE Published

via MITRE·05:12 PM

Data Sourced

via MITRE·05:12 PM

DescriptionSeverity

Data Sourced

via NVD·06:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this vulnerability?

Systems running Microsoft Windows Shell are affected according to the available data. Exploitation requires an attacker to already be authorized on the target system, so it is primarily a local post-access risk rather than a remote entry point.

What does an attacker need to exploit it?

The attacker needs local access with low privileges and must overcome high attack complexity. No user interaction is required.

What is the potential impact after successful exploitation?

A successful exploit can elevate privileges locally and has high potential impact to confidentiality, integrity, and availability.

CVE-2026-69383: Windows Shell Elevation of Privilege Vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What does an attacker need to exploit it?

What is the potential impact after successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What does an attacker need to exploit it?

What is the potential impact after successful exploitation?