Critical Windows Shell Zero-Day Vulnerability Exploited

Microsoft has released updates to address a critical zero-day vulnerability in Windows Shell, tracked as CVE-2026-21510, which is actively being exploited. This security flaw allows remote attackers to bypass essential protection mechanisms, affecting millions of Windows users. The vulnerability was published on February 10, 2026, and added to the CISA KEV due to active exploitation on the same day.