Microsoft Windows Shell Protection Mechanism Failure Vulnerability Allowing Security Feature Bypass

A protection mechanism failure vulnerability has been identified in Windows Shell, allowing unauthorized attackers to bypass security features over a network. This vulnerability affects multiple Windows versions and could enable attackers to circumvent Windows SmartScreen and security prompts, executing controlled content without user consent.

Impact

Exploitation of this vulnerability can lead to a security feature bypass, allowing attacker-controlled content to be executed without user awareness or approval.

Remediation

Users can apply the security update for their specific Windows version. This update is available through the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the security update can be downloaded via the Microsoft Update Catalog.