CVE-2012-1849: Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local...

Security readout for executives and security teams

This is a legacy Microsoft Lync 2010 DLL-loading flaw. If a user opens or handles a meeting-related file from a folder controlled by an attacker, Lync may load a malicious DLL from that folder. The source bundle describes local privilege gain, not confirmed remote compromise or active exploitation. Exposure is most likely on Windows endpoints still running Microsoft Lync 2010, Lync 2010 Attendee, or Lync 2010 Attendant. Organizations that have fully removed or upgraded these legacy clients are unlikely to be exposed based on the provided sources. Prioritize if legacy Lync 2010 clients remain in the environment, especially on shared workstations or systems handling external meeting files. If Lync 2010 has been removed or patched, business urgency is lower but should be documented. Mitigation focus: Apply Microsoft’s MS12-039 security update where affected Lync clients remain installed.; Remove or upgrade legacy Lync 2010, Attendee, and Attendant installations where possible.; Restrict users from opening meeting files from untrusted or user-writable shared folders..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.