CVE-2024-21412: high-severity vulnerability in Microsoft Windows 10 Version 1809
Internet Shortcut Files Security Feature Bypass Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Windows Internet Shortcut files (.url) can bypass security features that are designed to protect users from malicious content. An attacker can craft a specially formatted shortcut file that tricks Windows into ignoring its own safety checks.
A security feature bypass in Windows Internet Shortcut file handling (CWE-693: Improper Neutralization of Special Elements) allows attackers to craft malicious .url files that circumvent mark-of-the-web and other protective mechanisms. The attack requires user interaction to open the crafted file, but successfully bypassed protections can lead to arbitrary code execution or elevation of privilege.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.