Microsoft / Outlook.com · Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 · +17
8.8 · CVSS 3.1HighCISA KEV
CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.
Description
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.