$ cve CVE-2010-2568 JSON

CVE-2010-2568 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 91.3% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-10-06.

Description

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	91.32% — more likely to be exploited than 100% of all CVEs
On CISA KEV	yes — remediate by 2022-10-06
Public exploit	yes
Published	2010-07-22
Last modified	2026-06-16

CISA KEV

Name	Microsoft Windows Remote Code Execution Vulnerability
Added	2022-09-15
Due	2022-10-06
Vendor / product	Microsoft / Windows
Ransomware use	none reported

Affected (5)

Vendor	Product
microsoft	windows 7
microsoft	windows server 2003
microsoft	windows server 2008
microsoft	windows vista
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - Shell LNK Code Execution (MS10-046) (Metasploit)	2010-09-21
exploit-db	Microsoft Windows - Automatic .LNK Shortcut File Code Execution	2010-07-18

References

→ the Explorer · watch your stack · NVD