Microsoft Windows Server
cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*
A use-after-free vulnerability has been identified in Windows Shell, which could allow an unauthorized attacker to execute code locally. This vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server 2025.
Exploitation of this vulnerability could lead to local code execution.
Users can apply the security updates provided in the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5055518 and KB5055528.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.