cvewindowswindows-shell
BREAKING: Windows zero-day lets booby-trapped files skip the download warning (CVE-2026-96951)
How to fix CVE-2026-96951: upgrade Windows to the October 2026 cumulative update (KB5127648 on Windows 11 24H2 and 25H2). It closes a Windows Shell Mark of the Web bypass that attackers are already using.
