CVE-2010-2568

highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.896 · 100 %ileexploit · weaponizedEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 5 exploits · weaponized

Likely / severe?

89.6% (100th) EPSS

CVSS 9.3 · high

Is it mine?

16 products

Check your exposure

Who says so?

3 sources

enisa_euvd · fstec_bdu · nvd

added 2022-09-15remediate by 2022-10-06

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-27

Microsoft Windows Remote Code Execution Vulnerability

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.8–9.3

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10

v2.09.3criticalAV:N/AC:M/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondaryexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20US

exploits (5)

Public proof-of-concept and weaponised exploit code.

exploit/windows/browser/ms10_046_shortcut_icon_dllloaderMicrosoft Windows Shell LNK Code Executionweaponized · metasploit
exploit/windows/smb/ms10_046_shortcut_icon_dllloaderMicrosoft Windows Shell LNK Code Executionweaponized · metasploit
EDB-14403Microsoft Windows - Automatic .LNK Shortcut File Code Executionfunctional · exploit_db
EDB-16574Microsoft Windows - Shell LNK Code Execution (MS10-046) (Metasploit)functional · exploit_db
post/windows/gather/forensics/fanny_bmp_checkFannyBMP or DementiaWheel Detection Registry Checkfunctional · metasploit

affected products (16)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Microsoft Corp Windows 7all versionsfstec_bduRU
Microsoft Corp Windows Server 2003 Service Pack 1all versionsfstec_bduRU
Microsoft Corp Windows Server 2003 Service Pack 2all versionsfstec_bduRU
Microsoft Corp Windows Server 2008all versionsfstec_bduRU
Microsoft Corp Windows Server 2008 R2all versionsfstec_bduRU
Microsoft Corp Windows Server 2008 Service Pack 2all versionsfstec_bduRU
Microsoft Corp Windows Vista Service Pack 1all versionsfstec_bduRU
Microsoft Corp Windows Vista Service Pack 2all versionsfstec_bduRU
Microsoft Corp Windows Vista Service Pack 3all versionsfstec_bduRU
microsoft windows 7all versionsnvdUScpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
microsoft windows server 2003all versionsnvdUScpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
microsoft windows server 2008all versionsnvdUScpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
microsoft windows server 2008= r2nvdUScpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
microsoft windows vistaall versionsnvdUScpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
microsoft windows xpall versionsnvdUScpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2010-07-22modified 2026-06-16

references (29)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan