Unpatched zero-day vulnerability in Windows including PoC

Jan. 16, 2019

Unpatched Windows vulnerability was published with a proof of concept. Microsoft plans to release patches as a part of the April update. The vulnerability that affects the way Windows handles vCard files allows for code execution from locally stored file. An attacker can leverage this vulnerability to execute code in the context of the current user. However it is not remotely exploitable, as it requires user interaction first.