CVE Catalog
CVE-2026-20834
MediumCVSS 4.6Exploitation Probability (EPSS)
Elevated risk0.71%
50th percentile - higher than 50% of all known CVEs
Summary
An absolute path traversal vulnerability in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.
Risk Assessment
An attacker with physical access could impersonate another resource or user, undermining system trust.
Recommendation
Apply the Microsoft security update and restrict physical access to devices.
Original NVD description (English source)
Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.