Live · 98 sources · updated 24m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 1 source

CVE-2026-119906

CVSS 7.8

Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to…

Vendor
Microsoft
Product
Windows Sandbox
CVSS v3.1
7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CVE NVD

    Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to…

    Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help