CVE-2026-96951

Microsoft Windows Command Injection Vulnerability

Outlook Web

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

13. Okt 2026

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96951
• CISA
  Microsoft Windows Command Injection Vulnerability
• NVD
  CVE-2026-96951