CVE-2024-21412

CVE-2024-21412 is a critical Internet Shortcut Files Security Feature Bypass Vulnerability affecting multiple versions of Microsoft Windows and Windows Server. This vulnerability allows an attacker to bypass security features, potentially leading to high-impact compromise of confidentiality and integrity. With a CVSS score of 8.1 (High), it is easily exploitable over a network with low attack complexity, requiring user interaction. This zero-day vulnerability has been actively exploited in the wild, including in known ransomware campaigns, and has garnered significant community discussion and media attention, despite a lack of public exploit code.