Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be triggered by remote…
Sources
Vulnerabilities
Why this score
| Signal | Points |
|---|---|
| ssvc active | 35 |
| cvss high — 8.8 | 10 |
| widely deployed | 15 |