CVE-2026-70563

Analyzed Analyzed - Analysis Complete

Windows Shell Link Following Vulnerability

Publication date: 2026-09-08

Last updated on: 2026-09-24

Assigner: Microsoft Corporation

Description

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-24

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-70563

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_shell	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper link resolution in Windows Shell before accessing files. An attacker can exploit this to perform spoofing over a network by tricking the system into following malicious links.

Impact Analysis

An attacker could impersonate legitimate files or resources, potentially leading to unauthorized access, data theft, or further network compromise. Users might unknowingly interact with spoofed files or links.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows Shell vulnerability. Monitor Microsoft's security advisories for patches and install them promptly.

Hi! I’m here to help you understand CVE-2026-70563. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70