MS10-046 fixes 0-day LNK vulnerability out of band

Microsoft released an update today that addresses the LNK vulnerability. The update is rated as critical and applies to all currently supported Windows Operating systems.

We recommend applying the update as quickly as possible. Attacks using this 0-day vulnerability have been increasing.

The recently discontinued Windows 2000 and Windows XP SP2 are not covered by the patch. Users of these Windows 2000 and XP SP2 need to work on an upgrade strategy for these operating systems, as over time without patch support they will become increasingly susceptible to attacks from malware