Product:
Windows Shell
Summary
Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack. This vulnerability can lead to high confidentiality impact, making sensitive information accessible to attackers. The attack requires physical access to the system, which limits the scope of potential exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.6 | CVE-2026-20834 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to the affected system. By manipulating the file paths, the attacker can perform unauthorized actions that may lead to spoofing. This requires a low level of technical skill, as the attack complexity is rated as low.
Affected Products
- Windows Shell: Vulnerable to absolute path traversal, allowing unauthorized access to sensitive information.
Mitigation
To mitigate this vulnerability, it is essential to restrict physical access to systems running Windows Shell. Additionally, applying security updates and following best practices for system security can help reduce the risk of exploitation.