CVE-2010-2568 Microsoft Windows
Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Remote Code Execution Vulnerability
- Added
- 2022-09-15
- Federal patch deadline
- 2022-10-06
- Ransomware use
- not known