Using Windows Preview Pane ? You might be under attack and no bug fix says Microsoft !

Preview Pane itself isn't dangerous the way it was made to sound back in 2020 — the specific bug behind that warning (a font-parsing flaw Microsoft labeled ADV200006) was fixed years ago, and if your Windows 11 or Windows 10 machine has installed any updates since then, you were never exposed to it for long. What's still true, and what most people get backward, is this: turning Preview Pane off does not stop Windows from touching the contents of your files. Thumbnails are generated separately, using a lot of the same file-parsing code, whether Preview Pane is on or off.

Back in March 2020, this blog covered a specific advisory Microsoft had just published: two related bugs in how Windows parsed a particular, fairly obscure font format — Adobe Type 1 PostScript fonts — through a Windows component called the Adobe Type Manager Library. A file carrying a booby-trapped font could, in theory, run code on your machine the moment Windows tried to render it. Opening a document with that font embedded was one way to trigger it. Viewing that same document in File Explorer's Preview Pane, without opening it at all, was the other — and that second path is what made the advisory newsworthy, because it meant a victim didn't have to double-click anything.

At the time, Microsoft didn't have a patch ready. What it published instead were workarounds: disable the WebClient service (which handles WebDAV file shares and was one route an attacker could use to deliver a font remotely), rename the vulnerable library file, or turn off Preview Pane and the Details pane's thumbnail rendering. Windows 7, which was itself only weeks past its own end of support, was described as the most exposed. Windows 10 had extra mitigations that Microsoft said made exploitation harder, though not impossible. None of that was Preview Pane being broken on its own — it was one specific font-parsing bug that Preview Pane happened to be able to trigger.

Is Preview Pane actually safe to use today?

For the overwhelming majority of files, on an up-to-date Windows 11 or Windows 10 PC, yes. Preview Pane isn't sitting there as some kind of open door. It's a feature that asks a "preview handler" — a small piece of code registered to a file type — to render a view of the file's contents in that right-hand panel, without you opening the file in its full application. Word documents, PDFs, images, and plain text all have their own handlers.

The category of risk that made ADV200006 newsworthy hasn't disappeared, though, and this is the part worth actually understanding rather than just remembering as "that thing from 2020." Any code that parses untrusted file content — whether that's a font renderer, an image decoder, or a document previewer — is a target, because parsing is exactly where bugs like buffer overflows tend to live. Preview Pane triggers that parsing automatically, the instant a file is highlighted, with no click required. That's the actual, ongoing reason security teams keep half an eye on preview handlers: not because Preview Pane is uniquely broken, but because "renders untrusted input without a click" describes a meaningfully larger attack surface than "renders trusted input you chose to open."

That mix-up is common enough that it's worth being precise about. File Explorer generates thumbnails — the little visual squares you see for images, and for some document types — using its own extraction path, separate from the full Preview Pane renderer, and it does this whether the Preview Pane checkbox is on or off. Turning Preview Pane off stops Windows from rendering a full preview of a highlighted file. It does not stop thumbnail generation, and it does nothing at all once you actually double-click a file open, because at that point you've handed it to a completely different piece of software — Word, Adobe Reader, Photos — with its own separate parsing code and its own separate bug history.

What Preview Pane being "off" actually buys you

Ethan's take on this one is blunt: "Preview Pane off is a speed bump, not a wall. It removes the zero-click path for whatever's sitting in that folder. That's genuinely worth having on a Downloads folder full of stuff from strangers. It's not worth pretending it makes the file safe to open next."

That framing matters because it sets expectations correctly. Disabling Preview Pane is a reasonable, low-effort precaution for folders full of files you didn't choose to receive — a Downloads folder, an inbox's attachment cache, a USB drive someone handed you, a shared network folder other people write to. It is not a substitute for keeping Windows updated, and it is not a reason to open something you already have doubts about.

Turning Preview Pane on or off in Windows 11

The path from 2020's version of this post — an "Organize" menu with a "Layout" submenu — belongs to a much older File Explorer. Windows 11's File Explorer is a ribbon-less, simplified interface, and Preview Pane now lives under the View controls at the top of the window.

Step by step

Open File Explorer. By default it lands on the Home view — a mix of pinned folders under Quick access and recently used files — rather than any single folder, so don't worry if what you see doesn't match a screenshot from an older guide. Navigate to any folder, then:

1. Click View in the toolbar (or press Alt to reveal the menu bar if you've customized the toolbar away).
2. Hover Show.
3. Click Preview pane to toggle it on or off. A checkmark next to it means it's currently on.

There's no separate confirmation dialog. The panel appears or disappears immediately along the right edge of the window, and the setting sticks across File Explorer windows and reboots — you're not re-toggling it every session.

Turning it off in Windows 10

Windows 10 kept the ribbon-based File Explorer, so the toggle is more visible: open File Explorer, click the View tab in the ribbon, and check or uncheck the Preview pane box in the Panes group. That's the entire process — no submenu, no Organize button, one checkbox.

Controlling Preview Pane on a managed or business PC

If you manage more than one PC — Jake's shop runs three — setting Preview Pane by hand on each one gets old fast, and it isn't the only option. On Windows 11 or 10 Pro, Enterprise, or Education, the Local Group Policy Editor lets an administrator enforce File Explorer view settings across a device without touching each account's individual toggle, the same tool IT teams use for browser and printer policies. Home edition doesn't include that editor at all — Microsoft reserves it for the higher editions — so on a Home PC the only fleet-wide route is a per-account registry change, which isn't something to attempt without someone comfortable backing out a mistake. For one or two personal machines, the View menu toggle covers it in ten seconds and there's no real reason to reach for anything heavier.

When to actually turn it off — and when to leave it on

This is a folder-by-folder decision more than a whole-PC one, even though the Windows setting is global. A few concrete situations:

Leave it on where it's genuinely useful and the files are your own: a personal Pictures library, a project folder you built yourself, a Documents folder that's just your own paperwork. There, Preview Pane saves real time and the files aren't a surprise.

Turn it off, or at least think twice, for: a Downloads folder, an email attachments cache, any folder synced from a source you don't fully control, USB drives from someone else's PC, and shared network folders where other people — including at a business with several employees — can write files.

When the toggle doesn't seem to work

A few things trip people up here, and each one has a different actual cause:

The panel toggles but stays empty for one specific file type. This usually isn't the Preview Pane setting failing — it's that no preview handler is registered for that file type, or the handler is broken. Common apps (Office, Adobe Reader, Photos) install their own handlers; if you've uninstalled the app a file type is normally previewed with, expect a blank panel or a generic icon instead of an error message.

Preview Pane works for some files in a folder but not others of the same type. Corrupted or partially downloaded files can fail silently in the previewer while opening fine, slowly, in the full application, because the full app is often more tolerant of a malformed file than a lightweight preview handler is.

The Preview pane option looks grayed out. This is uncommon on a personal PC. On a work or school machine, it can mean an administrator has restricted File Explorer's view options through managed policy — in that case, it isn't a setting you can change from your own account, and it's worth asking whoever manages the PC rather than hunting for a workaround.

What actually previews, and what doesn't, by file type

This is the part most guides skip, and it explains most of the "why is this blank" questions people run into.

Office documents — Word, Excel, PowerPoint — generally preview out of the box if Office is installed, since Office supplies the handler. Without Office installed, expect a blank panel or a generic icon rather than a rendered page; Windows doesn't ship its own Office document renderer.

PDFs need a registered PDF preview handler to work at all. Whichever PDF reader you have installed — a dedicated reader app, or a browser that registers itself as one — is what actually supplies it. If you've uninstalled every PDF app and rely purely on a browser tab to open PDFs, don't be surprised if Preview Pane shows nothing for them.

Standard photo formats — JPG, PNG, BMP — work without installing anything extra. Two common exceptions catch people out: HEIC photos, the format iPhones save to by default, need a separate free extension from the Microsoft Store before Windows will preview or even thumbnail them properly, and RAW files straight off a dedicated camera typically need a codec pack from the camera manufacturer, since Windows doesn't ship RAW support out of the box.

ZIP and other archive files are not meant to show a rendered preview at all — Explorer treats them as a special kind of folder you can browse into rather than a document to render, so a blank Preview Pane for a ZIP file is expected behavior, not a broken handler.

Video and audio files typically show a static frame or an icon rather than actually playing inside Preview Pane. That's Explorer choosing not to run a full media player automatically for every highlighted file — arguably the more sensible default given everything above about automatic, no-click rendering.

Third-party file managers and preview tools

Plenty of third-party file managers and "power previewer" utilities exist, and some genuinely add useful preview handlers for file types Windows doesn't cover well on its own. The honest trade-off: every extra preview handler you install is more parsing code with automatic, no-click execution on untrusted files — the exact category of risk this whole topic is about. Before adding one, it's worth asking whether it covers a file type you actually deal with often enough to matter, rather than installing a bundle of handlers "just in case." Fewer installed handlers is, all else equal, a smaller attack surface, not a missed convenience.

The privacy angle, separate from the security one

There's a second, non-malware reason people turn Preview Pane off that's worth naming plainly: it shows the contents of a file to anyone standing near your screen the moment you click on it, before you've decided you want it shown. On a shared or public-facing PC — a shop counter machine, a family computer, a work laptop open in a coffee shop — that's a real, everyday exposure that has nothing to do with malware. If that's your actual concern, the fix is the same toggle, and it's worth applying it specifically to any folder with financial documents, IDs, or anything you wouldn't want visible to whoever's next to you.

Edge cases: network drives, cloud files, remote desktop, and VMs

Mapped and shared network drives. The 2020 advisory specifically called out the WebClient service — the Windows component that handles WebDAV, a protocol for accessing files over a network as if they were local — as one delivery path worth disabling as a precaution. Most home users never touch WebDAV directly, but small offices sometimes do through cloud storage integrations that mount as a network location. If you don't know whether you use it, you likely don't, and there's no reason to hunt down and disable a service you're not using.

Cloud-synced folders and OneDrive placeholders. If a folder is synced through OneDrive's Files On-Demand feature, files showing a cloud icon instead of a green checkmark are placeholders — they aren't actually stored on your PC yet. Highlighting one to preview it triggers a download in the background, worth knowing if you're on a slow or metered connection: previewing a folder full of cloud-only files can quietly pull down every one of them just from arrowing down the list, the same way opening one would.

Touch devices and multiple monitors. On a tablet or 2-in-1 without a physical mouse, the View menu is a tap target like anything else — nothing about where Preview Pane lives changes on touch. What does change is how much the panel costs you: on a smaller screen it eats a large share of the visible file list, which is why a lot of tablet users leave it off simply to see more files at once rather than for any security reason. On multiple monitors, the on-or-off state is shared across every File Explorer window you open, including ones on a second screen, so it isn't something you end up toggling per window.

Remote Desktop sessions. Preview Pane works the same way inside a Remote Desktop session as it does locally — it's rendering files on whichever machine File Explorer is actually running on, not transmitting raw file data separately. The same on/off logic applies; there's nothing special to configure for remote sessions specifically.

Virtual machines. Same answer again — a VM is just another Windows install from Explorer's point of view. If you're using a VM specifically to open files you don't trust at all, that's a genuinely good practice, and it works whether Preview Pane is on or off inside the VM, because the VM boundary is doing the real protective work, not the Explorer setting.

Two adjacent tasks worth knowing

Once people understand thumbnails and Preview Pane are separate systems, the next question is almost always about the thumbnail cache itself — the file where Windows stores those generated thumbnails so it doesn't have to regenerate them every time you open a folder. If you're troubleshooting a folder showing wrong or stuck thumbnails, that's a Disk Cleanup task ("Thumbnails" is one of the checkboxes in the standard Disk Cleanup tool), not a Preview Pane setting, and it's worth knowing the two are unrelated so you're not toggling Preview Pane on and off trying to fix a thumbnail problem it was never going to solve.

A second, related fix, for when previews or thumbnails break across many files at once rather than just one: close File Explorer entirely and reopen it, or restart the PC. Preview handlers can get stuck holding a file open in the background, and a fresh Explorer process clears more of these cases than people expect, before you need to reach for the Disk Cleanup route above.

Frequently asked questions

Is Preview Pane the same as thumbnails?

No. Preview Pane renders a full view of a highlighted file in a side panel and requires the setting to be turned on. Thumbnails are the small icon-sized previews shown for files in a folder, generated separately, and they appear regardless of whether Preview Pane is on or off.

Does turning off Preview Pane stop all malware from files?

No. It only removes the automatic, no-click rendering that happens when you highlight a file. It does nothing once you actually double-click a file open, and it has no effect on other delivery methods like a malicious link or a macro in a document you chose to run.

Is the ADV200006 vulnerability still a risk in 2026?

Not as an active, unpatched threat. It affected specific unpatched versions of Windows in 2020, and Microsoft addressed it in a subsequent security update. Any Windows 11 or currently updated Windows 10 machine is not running the vulnerable code this particular advisory described.

Why can't I find the Preview Pane setting under Organize like older guides say?

That menu belonged to an older version of File Explorer. In Windows 11 it's under View > Show > Preview pane; in Windows 10 it's a checkbox on the View ribbon tab.

Does Preview Pane work differently on Windows 11 Home versus Pro?

The toggle itself works the same on both. Where the editions differ is fleet-wide control: Group Policy management of this setting is a Pro, Enterprise, or Education feature, and Home relies on a per-account registry change instead if you need to enforce it beyond your own account.

If I disable Preview Pane, will File Explorer feel slower or faster?

Slightly faster when browsing folders full of large or complex files, since Windows isn't rendering a full preview every time you click something new. The difference is usually small enough that most people don't notice it unless they're working through a folder of large PDFs or high-resolution images.

Can I turn Preview Pane off for just one folder instead of the whole PC?

Not through the built-in toggle — it's a global File Explorer setting, on or off everywhere at once. If you need per-folder control, that's a job for a third-party file manager rather than stock Windows.

Does Preview Pane preview password-protected files?

No. A file that requires a password to open generally can't be rendered by a preview handler either, since the handler doesn't have the password. You'll typically see a generic icon or a prompt instead of a rendered preview.

Is it safer to just always open files instead of previewing them?

Not necessarily, and this is worth being honest about: opening a file hands it to a full, feature-rich application — often with more capability, and its own separate history of bugs, than a lightweight preview handler. Neither previewing nor opening is inherently the "safe" choice; the file's origin and your trust in it matter far more than which action you take.

My Preview pane option is grayed out. What do I do?

On a personal PC this is unusual. On a work or school machine, it's typically a sign that an administrator has locked down File Explorer's view options through managed policy, and it isn't something you can change from a standard account — ask whoever manages the device.

Does antivirus software make Preview Pane safe to leave on everywhere?

It helps, but it isn't a guarantee. Antivirus software is generally good at catching known malware patterns; it's far less reliable against a brand-new, unpatched parsing bug in the previewer itself, which is exactly the category ADV200006 fell into. Treat it as one layer, not the whole answer.

Should a small business disable Preview Pane on shared computers?

It's a reasonable, low-cost default for any shared or customer-facing machine — a shop counter PC, a shared intake computer, anything that regularly handles files from people outside the business. It costs almost nothing to disable and removes one automatic rendering step from files nobody on staff chose to receive.

Does Preview Pane work in the Recycle Bin?

No, not for most file types. The Recycle Bin is a special virtual folder rather than a real one, and File Explorer doesn't run its usual preview handlers there. You'll generally need to restore a file to its original location before you can preview it normally.

Will previewing OneDrive files use data or storage I wasn't expecting?

It can. If a file shows OneDrive's cloud-only icon, previewing it downloads the full file to generate that preview, the same as opening it would. On a metered connection, scrolling through a folder of cloud-only files can use noticeably more data than you'd expect from just looking.

Revision note. Originally published March 26, 2020, as a warning about a then-unpatched advisory, ADV200006. Rewritten August 16, 2026, for Windows 11 and Windows 10 — Microsoft addressed the underlying font-parsing flaw long ago, and File Explorer's own menus have changed twice since we first wrote this, so the steps here reflect where Preview Pane actually lives today. If you found the old version of this post because you were worried in 2020 and never got a straight answer on whether you were still exposed: you're not, and you haven't been for a long time.