Microsoft Windows Shell Use-After-Free Vulnerability Allowing Local Code Execution

Vulnerability

A use-after-free vulnerability has been identified in Windows Shell, which could allow an unauthorized attacker to execute code locally. This vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to local code execution.

Remediation

Users can apply the security updates provided in the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5055518 and KB5055528.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.