Cyber Resilience

CVE-2010-2568

Microsoft Windows Server 2008 r2

CISA KEVActive ExploitationEUVD ExploitedPublic PoC
Published
22 July 2010
Modified
22 April 2026
KEV Added
15 September 2022
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.91 99.8th percentile
Risk Priority 83 floored blend · peak EPSS

Summary

CVE-2010-2568 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 0.2% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF…

more

shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.

CWE(s)
NVD-CWE-noinfo
KEV Date Added
15 September 2022

Related Threats

Threat-Actor AttributionAI

Equation (G0020)
Version: 1.5 February 2015 #EquationAPT #TheSAS2015 EQUATION GROUP: QUESTIONS AND ANSWERS 2 TLP: White For any inquiries, please contact intelreports@kaspersky.com Table of contents 1. What is the Equation group? ...........................
NEODYMIUM (G0055)
Microsoft Security Intelligence Report Volume 21 | January through June, 2016 This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. This docu
PROMETHIUM (G0056)
Microsoft Security Intelligence Report Volume 21 | January through June, 2016 This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. This docu

CVEs Like This One

CVE-2012-0151Same product: Microsoft Windows 7both on KEV
CVE-2011-3402Same product: Microsoft Windows 7both on KEV
CVE-2010-4398Same product: Microsoft Windows 7both on KEV
CVE-2012-4792Same product: Microsoft Windows 7both on KEV
CVE-2010-3962Same product: Microsoft Windows 7both on KEV
CVE-2012-4969Same product: Microsoft Windows 7both on KEV
CVE-2013-1347Same product: Microsoft Windows 7both on KEV
CVE-2010-0249Same product: Microsoft Windows 7both on KEV
CVE-2010-0806Same product: Microsoft Windows 7both on KEV
CVE-2014-4077Same product: Microsoft Windows 7both on KEV

Affected Assets

microsoft
windows 7
all versions
microsoft
windows server 2003
all versions
microsoft
windows server 2008
all versions, r2
microsoft
windows vista
all versions
microsoft
windows xp
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References