CVE-2026-20834

Medium

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

secure@microsoft.com·CWE-36·Published 2026-01-13

CVSS

4.6

EPSS

0.01

KEV

Exploits

cve.orgen

116 chars

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

NVDen

116 chars

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

NVDes

119 chars

Salto de ruta absoluto en Windows Shell permite a un atacante no autorizado realizar suplantación con un ataque físico.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.6	—	—	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
3.1	Secondary	NVD	4.6	0.9	3.6