Local 0day Windows 10, 8, 7. ".contact" File HTML Injection (RCE)

[Whitney]

Here is additional information --

ZDI-19-121

(0Day) Microsoft Windows contact File Insufficient UI Warning Remote Code Execution Vulnerability

www.zerodayinitiative.com

GitHub - wlsfla/ZDI-CAN-7591: Windows Contact File HTML Injection Mailto: Link RCE 0day / ZDI-CAN-7591

Windows Contact File HTML Injection Mailto: Link RCE 0day / ZDI-CAN-7591 - wlsfla/ZDI-CAN-7591

github.com

Full Disclosure: Microsoft Windows Contact File / Remote Code Execution (Resurrected) CVE-2022-44666

seclists.org

As of 2025, most NT systems have been patched.

 

[advikmittal]

bien bien bien bien y

 

[0xroot]

thanks ok ok ok ok ok o k ok

 

[f12_]

Its really work ? sure ???

 

[N3tNinj4]

very good work man, thanks for sharing!!

 

[gsw81789]

need some zero day hope to work

 

[default0101]

thank you okh lets stry this articles pratoceman