[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjWbkUhnXhadkpev-cuVKtDVTJdlKV2BxmSNlbbW9hQA":3,"g5a-risk:CVE-2024-21412":145},{"success":4,"data":5,"meta":142},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":62,"references":63,"referencesCount":70,"weaknesses":71,"weaknessesCount":70,"isActivelyExploited":4,"cisaInfo":80,"otxData":26,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":140,"notableEvents":141},"CVE-2024-21412","What is CVE-2024-21412?","Internet Shortcut Files Security Feature Bypass Vulnerability","2024-02-13T18:15:59.903","2024-08-14T19:47:44.623",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"secure@microsoft.com","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.2,0.95443,[29,29,29,29,29,29,29],"High",[33,38,41,44,47,50,53,56,59],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"microsoft","windows_10_1809","*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"windows_10_21h2","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",{"vendor":34,"product":42,"version":36,"criteria":43,"vulnerable":4},"windows_10_22h2","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",{"vendor":34,"product":45,"version":36,"criteria":46,"vulnerable":4},"windows_11_21h2","cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",{"vendor":34,"product":48,"version":36,"criteria":49,"vulnerable":4},"windows_11_22h2","cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",{"vendor":34,"product":51,"version":36,"criteria":52,"vulnerable":4},"windows_11_23h2","cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",{"vendor":34,"product":54,"version":36,"criteria":55,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",{"vendor":34,"product":57,"version":36,"criteria":58,"vulnerable":4},"windows_server_2022","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",{"vendor":34,"product":60,"version":36,"criteria":61,"vulnerable":4},"windows_server_2022_23h2","cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",9,[64],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2024-21412","Microsoft",[68,69],"Patch","Vendor Advisory",1,[72],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",{"shortDescription":81,"requiredAction":81,"vulnerabilityName":81,"dateAdded":26},"",[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2024-21412? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-21412, a high severity cyber security vulnerability from 2024. High exploit probability (95.4%). Internet Shortcut Files S...","CVE-2024-21412, CVE-2024-21412 vulnerability, CVE-2024-21412 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1809 vulnerability, windows_10_21h2 vulnerability, windows_10_22h2 vulnerability, windows_11_21h2 vulnerability, windows_11_22h2 vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2024-21412",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":9,"dateModified":10,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-21412","Cybersecurity","CVE-2024-21412, CVE-2024-21412 vulnerability, CVE-2024-21412 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":26,"Negate":26,"Nodes":110},[111],{"Operator":112,"Negate":26,"CPEMatch":113},"OR",[114,117,120,123,126,129,132,134,137],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":116,"VersionEndIncluding":26},"A1689DFD-D52D-4121-BFD7-DBF2BE4E7DE8","10.0.17763.5458",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":119,"VersionEndIncluding":26},"C78776CC-3A9C-41A3-8BEB-D71D92F6579D","10.0.19044.4046",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":122,"VersionEndIncluding":26},"806CA6D2-42B2-4244-A5ED-D23E6DD56772","10.0.19045.4046",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":125,"VersionEndIncluding":26},"3F7F8173-9E59-48E4-98C9-4BEB6AE79451","10.0.22000.2777",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":128,"VersionEndIncluding":26},"84EDBE52-EFE0-4D6D-AA76-698B6F9687D1","10.0.22621.3155",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":131,"VersionEndIncluding":26},"900D1DA2-6DA7-4681-966A-B9973B1329EA","10.0.22631.3155",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":116,"VersionEndIncluding":26},"A9098F92-79E7-4762-A37C-99B4CFA8CDD1",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":136,"VersionEndIncluding":26},"5C8F0436-3AFE-48BD-AE92-8F8392DD0A1D","10.0.20348.2322",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":139,"VersionEndIncluding":26},"B6FCF1A0-6B8E-457A-AB6A-2DE939B9D18B","10.0.25398.709",[],[],{"lastModified":10,"cacheTime":143,"version":144},1793196319785,"2.0",{"score":146,"band":31,"action":147,"scoredAt":148},76,"Emergency patch","2026-07-01T10:31:54.362803+00:00"]