CVE record · 1 source
CVE-2026-119906
CVSS 7.8Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to…
- Vendor
- Microsoft
- Product
- Windows Sandbox
- CVSS v3.1
- 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-78
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to…
Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally.