{"schema":"vulnpedia.research/1","cve":"CVE-2026-21510","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510","tags":["vendor-advisory","patch","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"microsoft","modified":"2026-08-19T16:26:02.555Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2026-08-19T16:26:02.555Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510"},{"source":"nvd","sourceId":"CVE-2026-21510","modified":"2026-06-17T10:18:45.110","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510"},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21510","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T14:44:45.894Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T14:44:45.894Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21510"},{"source":"nvd","sourceId":"CVE-2026-21510","modified":"2026-06-17T10:18:45.110","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21510"}]},{"source":"euvd","sourceId":"EUVD-2026-7337","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7337","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-7337","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7337"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Feb","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Feb"}]},{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.recordedfuture.com/blog/february-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://www.recordedfuture.com/blog/february-2026-cve-landscape"}]},{"url":"https://www.akamai.com/blog/security-research/2026/apr/incomplete-patch-apt28s-zero-day-cve-2026-3220","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://www.akamai.com/blog/security-research/2026/apr/incomplete-patch-apt28s-zero-day-cve-2026-3220"}]},{"url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/andreassudo/CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass","source":"poc-in-github","sourceId":"CVE-2026-21510","description":"CVE-2026-21510 (CVSS 8.8, Important) — Windows Shell security feature bypass. An attacker can trick a user into clicking a malicious link or shortcut file to bypass SmartScreen/Shell warnings and execute code without prompts. Publicly disclosed and exploited.","modified":"2026-10-19T10:19:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21510","url":"https://github.com/andreassudo/CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass"},{"source":"poc-in-github","sourceId":"CVE-2026-21510","modified":"2026-10-19T10:19:11Z","url":"https://github.com/andreassudo/CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass"}],"tags":[]},{"url":"https://github.com/EpSiLoNPoInTOrI/EpSiLoNPoInTlnk","source":"poc-in-github","sourceId":"CVE-2026-21510","description":" CVE-2026-21510 LNK generator PoC","modified":"2026-05-24T07:44:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21510","url":"https://github.com/EpSiLoNPoInTOrI/EpSiLoNPoInTlnk"},{"source":"poc-in-github","sourceId":"CVE-2026-21510","modified":"2026-05-24T07:44:14Z","url":"https://github.com/EpSiLoNPoInTOrI/EpSiLoNPoInTlnk"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-02-10T00:00:00Z","modified":"2026-02-10T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Microsoft","product":"Windows","dueDate":"2026-03-03T00:00:00Z","cisaDateAdded":"2026-02-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","modified":"2026-02-10T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","catalog":"VulnCheck KEV","kind":"report","url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Feb","dateAdded":"2026-02-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Feb"},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510"},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/february-2026-cve-landscape","dateAdded":"2026-03-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","url":"https://www.recordedfuture.com/blog/february-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","catalog":"VulnCheck KEV","kind":"report","url":"https://www.akamai.com/blog/security-research/2026/apr/incomplete-patch-apt28s-zero-day-cve-2026-3220","dateAdded":"2026-04-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","url":"https://www.akamai.com/blog/security-research/2026/apr/incomplete-patch-apt28s-zero-day-cve-2026-3220"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","catalog":"VulnCheck KEV","kind":"report","url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild","dateAdded":"2026-05-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21510","url":"https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild"}]}]}