Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections

What happened

Designated CVE-2026-96951 (the public catalogue number for a specific software flaw), the flaw was disclosed on October 13, 2026, during the company’s monthly security update. If successfully exploited, it can undermine protections designed to alert users when attempting to open potentially dangerous content downloaded from untrusted sources.

Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW) security protections. Microsoft classifies the vulnerability as Important, giving it a CVSS v3.1 base score of […] The post Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform . Microsoft is a software and software development company based in Redmond, and its products and services include Microsoft Windows.

Read Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections By Divya October 14, 2026 Share Facebook Twitter Pinterest WhatsApp Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW) security protections. Microsoft classifies the vulnerability as Important, giving it a CVSS v3.1 base score of 8.8.

Windows Shell Zero-Day The vulnerability falls under the category of security feature bypass. It is associated with CWE-77, which involves improper neutralization of special elements used in a command, commonly known as command injection.