Windows Shell Flaw CVE-2026-96951 Lets Crafted Files Dodge Mark of the Web, and Microsoft Says It Is Exploited
Microsoft says a crafted file sent by email or chat can evade Mark of the Web via CVE-2026-96951. CISA's KEV deadline is 16 October; patch via October updates.
· 6 min