Ransomware.live 👀

Known ransomware campaign use. CISA's KEV catalog lists this CVE as used in ransomware attacks.

CISA KEV

Exploited

Ransomware Use

CVSS 3.1 Score

8.1

HIGH

EPSS Score

99.41%

EPSS Percentile

99.9%

as of 2026-10-05

NVD Status

Analyzed

Published 2024-02-13

Internet Shortcut Files Security Feature Bypass Vulnerability

Affected Vendors / Products

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness (CWE)

CWE-693NVD-CWE-noinfo

Last Modified

2026-08-10

CVSS 3.1 Vector Breakdown

CISA Vulnrichment (SSVC)

Exploitation: active Automatable: no Technical Impact: total

Source	Exploited	Ransomware Use	Notes
kevintel	Yes	Known	KEVIntel entry: Internet Shortcut Files Security Feature Bypass Vulnerability \| Affected: Microsoft / Windows 11 version 21H2, Windows 10 Version 1809, Windows 10 Version 21H2, Windows Server 2022, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2019, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2019 (Server Core installation) \| CVSS: 8.1 (HIGH) \| Used in malware: yes \| Not yet in CISA KEV: False
cisa-kev	Yes	Known	KEV entry: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability \| Affected: Microsoft / Windows \| Description: Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. \| Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. \| Due date: 2024-03-05 \| Known ransomware campaign use (KEV): Known \| Notes (KEV): https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21412; https://nvd.nist.gov/vuln/detail/CVE-2024-21412

Correlated via CISA KEV, Shadowserver & KEVIntel.com. Source: vulnerability-lookup.org

Vendor Source	Status	Statement
Red Hat CSAF VEX	known not affected (1)	Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

Ransomware Group	Vendor	Product	Source
DragonForce	Windows	SmartScreen	trendmicro.com
thegentlemen	Windows	SmartScreen	ransom-isac.com

CVE-2024-21412