Actively exploited in the wild
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-02-13. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-21412
HighCVSS 8.1KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
Security feature bypass vulnerability in Internet Shortcut Files. Allows an attacker to bypass system security features.
Risk Assessment
An attacker can bypass security, potentially leading to malicious code execution or unauthorized access.
Recommendation
Install the latest security updates provided by Microsoft.
Original NVD description (English source)
Internet Shortcut Files Security Feature Bypass Vulnerability