CVE-2010-2568
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Windows
Date Added
2022-09-15
Remediation Due
2022-10-06
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046; https://nvd.nist.gov/vuln/detail/CVE-2010-2568
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_7 | - |
| microsoft | windows_server_2003 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | r2 |
| microsoft | windows_server_2008 | r2 |
| microsoft | windows_vista | - |
| microsoft | windows_vista | - |
| microsoft | windows_xp | - |
| microsoft | windows_xp | - |
References & Advisories (15)
Vendor Advisory
US Government Resource
Third Party Advisory
US Government Resource
Third Party Advisory
Press/Media Coverage
Patch
Vendor Advisory
Patch
Third Party Advisory
US Government Resource
Not Applicable
Issue Tracking
Exploit
Issue Tracking
Exploit
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Patch
Vendor Advisory
Broken Link
Exploit
Third Party Advisory
Broken Link