CVE-2010-2568: Microsoft Windows Remote Code Execution Vulnerability
Vulnerability summary
CVE-2010-2568 is a high (CVSS 9.3) vulnerability in Microsoft Windows. It is known to be exploited: CISA lists it, first on 15-09-2022. EPSS estimates a 91.32% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 8 public exploits are recorded.
Timeline
- 22-07-2010PublishedVulnerability first disclosed.
- 15-09-2022Added to CISA KEVMicrosoft Windows Remote Code Execution Vulnerability
- 06-10-2022CISA remediation dueApply updates per vendor instructions.
- 22-10-2025Last modifiedVulnerability information updated.
Description
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
91.32%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 91.32% on 19-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 15-09-2022
- Federal due date
- 06-10-2022
CISA required action
Apply updates per vendor instructions. docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046 nvd.nist.gov/vuln/detail/CVE-2010-2568
Public exploits
8 foundExploit Reference (isc.sans.edu)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (f-secure.com)
Maturity: unknown
Show all 8 exploits
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
Maturity: weaponized
Microsoft Windows - Shell LNK Code Execution (MS10-046) (Metasploit)
Maturity: weaponized
Microsoft Windows Shell LNK Code Execution
exploit/windows/browser/ms10_046_shortcut_icon_dllloader
Maturity: weaponized
Microsoft Windows Shell LNK Code Execution
exploit/windows/smb/ms10_046_shortcut_icon_dllloader
Maturity: weaponized
FannyBMP or DementiaWheel Detection Registry Check
post/windows/gather/forensics/fanny_bmp_check
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft5 products
1 vendor · 5 products
References
15 links- www.us-cert.gov/cas/techalerts/TA10-222A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11564VDB EntrySignatureX Refsource OVALBroken Link
- krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/X Refsource MISCPress/Media Coverage
www.microsoft.com/technet/security/advisory/2286198.mspxX Refsource CONFIRMBroken LinkPatchVendor Advisory
Show all 15 references
- docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046Vendor AdvisoryX Refsource MSPatch
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2568Government ResourceUS Government Resource