Windows Shell vulnerabilities

Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user due to improper validation of file copy destinations.

Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 has a remote code execution vulnerability due to improper handling of executable files and shares during rename operations.

Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted web site.

A use-after-free vulnerability in Windows Shell in various versions of Microsoft Windows allows remote attackers to execute arbitrary code via a crafted toolbar object.

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code remotely over a network.

A double free vulnerability in Windows Shell allows an unauthorized attacker to execute code over a network.

Incorrect implementation of an authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

Use-after-free vulnerability in Windows Shell allows an authorized attacker to elevate privileges locally.

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

A vulnerability in Windows Shell allows an authorized attacker to disclose sensitive information over a network. The flaw stems from unauthorized access to data.

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.

An absolute path traversal vulnerability in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

A race condition in Windows Shell allows an authorized attacker to elevate privileges locally. The issue stems from improper synchronization when using a shared resource concurrently.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.