tag
Phishing
High
Windows ShellLink (.lnk) Remote Code Execution — CVE-2026-21510 LNK-Stomping Generator
CVE-2026-21510·
Windows Shell Link (.lnk) parsing (MS-SHLLINK)
unpatched
High
RTF Protected-View Bypass (CVE-2026-21514) Chained with ShellLink RCE (CVE-2026-21510) — Builder Scripts
CVE-2026-21514, CVE-2026-21510·
Microsoft Office (RTF/Word rendering + Protected View) and Windows Shell Link (.lnk) handling
unpatched
Medium
EcoOnline EHS Android App — Deep Link Validation Bypass to WebView Open Redirect (CVE-2026-26897)
CVE-2026-26897·
EcoOnline EHS for Android (com.airsweb.v10)
patched