Critical Vulnerability in Microsoft Windows Could Allow Remote Code Execution

What changed

A newly discovered vulnerability in Microsoft Windows has been identified, which involves an external control of file name or path. This flaw could enable attackers to execute arbitrary code from a remote WebDAV location, leveraging the WorkingDirectory attribute found in Internet Shortcut files.

Who is affected

This vulnerability primarily impacts users of Microsoft Windows 10 version 1507. Organizations and individuals utilizing this version should be particularly vigilant.

The following groups are notably affected:

• Users of Microsoft Windows 10 version 1507
• Organizations relying on legacy Windows systems
• IT departments managing Windows environments
• Any entity utilizing Internet Shortcut files linked to external WebDAV locations

What to do

To mitigate the risks associated with this vulnerability, users and organizations should consider the following actions:

Regularly update systems to the latest versions of Windows to ensure all security patches are applied.

• Monitor for updates from Microsoft regarding security patches.
• Review and adjust configurations related to Internet Shortcut files.
• Educate users about the risks of external WebDAV locations.