A failure in the Windows Shell protection mechanism allows an attacker to bypass a security feature when interacting over a network. This bypass can be used to inject commands or compromise the integrity of the target system, representing a serious risk of unauthorized command execution, as indicated by the CWE-693 weakness.

The vulnerability affects Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, and 26H1; and Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025, and 23H2 editions, including both full and core installations.

With a CVSS score of 8.8 the exploit is considered high severity. Although the EPSS score is very low (<1%), this does not diminish the potential for exploitation, especially since the vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves remote exploitation of the Windows Shell component over a network; it is inferred that local privileges may not be required, potentially enabling the execution of arbitrary commands on the affected systems.