CVE-2024-21412

HighCVSS 8.1/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Internet Shortcut Files Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-693

Affected software

No affected versions have been published.

Timeline

Published
Feb 13, 2024
Last modified
Aug 10, 2026
Added to CISA KEV
Feb 13, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214139.8Microsoft Outlook Remote Code Execution VulnerabilityCVE-2024-214148.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-214158.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-214169.8Windows TCP/IP Remote Code Execution VulnerabilityCVE-2024-214178.8Windows Text Services Framework Elevation of Privilege VulnerabilityCVE-2024-214187.8Software for Open Networking in the Cloud (SONiC) Elevation of Privilege VulnerabilityCVE-2024-214195.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2024-21425.4The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget inCVE-2024-214208.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-214217.5Azure SDK Spoofing VulnerabilityCVE-2024-214234.8Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2024-214246.5Azure Compute Gallery Elevation of Privilege Vulnerability
CVE-2024-21412: High severity, CVSS 8.1 | Vulnix