The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
This vulnerability is being actively exploited in the wild, according to the CISA Known Exploited Vulnerabilities catalog. CISA added it on .
CVE-2026-21510: Microsoft Windows Shell Protection Mechanism Failure Vulnerability
- Identifier
- CVE-2026-21510
- Published
- Record updated
- Known exploitation
- Listed in the CISA Known Exploited Vulnerabilities catalog since February 10, 2026.
- EPSS
- 24.5%
Summary
Microsoft Windows Shell contains a protection mechanism failure vulnerability, tracked as CVE-2026-21510. An unauthorized attacker can exploit it over a network to bypass a security feature. The vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog and is actively exploited in the wild.
Mitigation
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due date: 2026-03-03.