high severity · exploited in the wild · published 2024-10-08
An attacker can run arbitrary code on your computer with your user rights by getting you to open a malicious console file. This has been used in real attacks to take full control of affected machines.
Fixed in: 10.0.26100.2033
CVE: CVE-2024-43572
Source: Microsoft (MSRC)
Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 1541 and your operating system.