[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjWbkUhnXhadkpev-cuVKtDVTJdlKV2BxmSNlbbW9hQA":3,"g5a-risk:CVE-2024-21412":157},{"success":4,"data":5,"meta":154},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":65,"references":66,"referencesCount":80,"weaknesses":81,"weaknessesCount":90,"isActivelyExploited":4,"cisaInfo":91,"otxData":26,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":152,"notableEvents":153},"CVE-2024-21412","What is CVE-2024-21412?","Internet Shortcut Files Security Feature Bypass Vulnerability","2024-02-13T18:15:59.903","2026-08-10T16:18:51.517",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.2,[],[],[],0.9941,[32,32,32,32,32,32,32],"High",[36,41,44,47,50,53,56,59,62],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"microsoft","windows_10_1809","*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",{"vendor":37,"product":42,"version":39,"criteria":43,"vulnerable":4},"windows_10_21h2","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",{"vendor":37,"product":45,"version":39,"criteria":46,"vulnerable":4},"windows_10_22h2","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",{"vendor":37,"product":48,"version":39,"criteria":49,"vulnerable":4},"windows_11_21h2","cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",{"vendor":37,"product":51,"version":39,"criteria":52,"vulnerable":4},"windows_11_22h2","cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",{"vendor":37,"product":54,"version":39,"criteria":55,"vulnerable":4},"windows_11_23h2","cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",{"vendor":37,"product":57,"version":39,"criteria":58,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",{"vendor":37,"product":60,"version":39,"criteria":61,"vulnerable":4},"windows_server_2022","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",{"vendor":37,"product":63,"version":39,"criteria":64,"vulnerable":4},"windows_server_2022_23h2","cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",9,[67,73,75],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2024-21412","Microsoft",[71,72],"Patch","Vendor Advisory",{"url":68,"source":69,"tags":74},[71,72],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21412","CISA",[79],"US Government Resource",3,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",1,{"shortDescription":92,"requiredAction":92,"vulnerabilityName":92,"dateAdded":26},"",[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2024-21412? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-21412, a high severity cyber security vulnerability from 2024. High exploit probability (99.4%). Internet Shortcut Files S...","CVE-2024-21412, CVE-2024-21412 vulnerability, CVE-2024-21412 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1809 vulnerability, windows_10_21h2 vulnerability, windows_10_22h2 vulnerability, windows_11_21h2 vulnerability, windows_11_22h2 vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2024-21412",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":9,"dateModified":10,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-21412","Cybersecurity","CVE-2024-21412, CVE-2024-21412 vulnerability, CVE-2024-21412 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120],{"Operator":26,"Negate":26,"Nodes":121},[122],{"Operator":123,"Negate":124,"CPEMatch":125},"OR",false,[126,129,132,135,138,141,144,146,149],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":128,"VersionEndIncluding":26},"A1689DFD-D52D-4121-BFD7-DBF2BE4E7DE8","10.0.17763.5458",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":131,"VersionEndIncluding":26},"C78776CC-3A9C-41A3-8BEB-D71D92F6579D","10.0.19044.4046",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":134,"VersionEndIncluding":26},"806CA6D2-42B2-4244-A5ED-D23E6DD56772","10.0.19045.4046",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":137,"VersionEndIncluding":26},"3F7F8173-9E59-48E4-98C9-4BEB6AE79451","10.0.22000.2777",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":140,"VersionEndIncluding":26},"84EDBE52-EFE0-4D6D-AA76-698B6F9687D1","10.0.22621.3155",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":143,"VersionEndIncluding":26},"900D1DA2-6DA7-4681-966A-B9973B1329EA","10.0.22631.3155",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":128,"VersionEndIncluding":26},"A9098F92-79E7-4762-A37C-99B4CFA8CDD1",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":148,"VersionEndIncluding":26},"5C8F0436-3AFE-48BD-AE92-8F8392DD0A1D","10.0.20348.2322",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":151,"VersionEndIncluding":26},"B6FCF1A0-6B8E-457A-AB6A-2DE939B9D18B","10.0.25398.709",[],[],{"lastModified":10,"cacheTime":155,"version":156},1792252243383,"2.0",{"score":158,"band":34,"action":159,"scoredAt":160},76,"Emergency patch","2026-10-16T07:00:47.34285+00:00"]