Vulnerability

CERT-In Vulnerability Note CIVN-2026-0218
Spoofing Vulnerability in Windows Shell

Original Issue Date:May 06, 2026

Severity Rating: CRITICAL

Software Affected

Windows Shell from 10.0.14393.9060 after 10.0.14393.0

Overview

Windows Shell Spoofing is a vulnerability component of Microsoft Windows allows an attacker to perform spoofing on targeted system.

Target Audience:
All-end user organization and individuals using Microsoft Windows Shell.

Risk Assessment:
High risk of unauthorized attacker to perform spoofing.

Impact Assessment:
Potentially executing malicious code, leading to malware infection, data compromise, or unauthorized system access.

Description

The Microsoft Windows Shell is the primary graphical user interface subsystem of the Microsoft Windows responsible for managing and rendering core UI components such as desktop, taskbar and File Explorer. It exposes APIs and COM interfaces for extending shell functionality and integrating application system.

The vulnerability exits in Microsoft Windows Shell manipulates and displays malicious files to appear as legitimate manipulating with the file extensions or icons are displayed. This allows an unauthorized attacker to execute malicious files leading to potential system compromise.

Solution

Apply appropriate updates as mentioned by the vendor:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202

CVE Name
CVE-2026-32202

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India