Microsoft update

KB5060996

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1
Windows Server 2008 for 32-bit Systems Service Pack 2 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1
Windows Server 2008 for x64-based Systems Service Pack 2 1
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1
Windows Server 2012 1.000
Windows Server 2012 (Server Core installation) 1.000
Windows Server 2012 R2 1
Windows Server 2012 R2 (Server Core installation) 1

TI-2025-24042 CVE-2025-33053 · GHSA-26qv-p8cr-jxp5

CRITICAL 97KEV

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.87135 Published 2025-06-10 Fixed in 10.0.10240.21034, 10.0.14393.8148 +12 CWE-73