 Due to the amount of publicly available information, ease of use, and the extreme effectiveness of this exploit, Palo Alto Networks is providing this threat brief to make our customers aware of this critical vulnerability and the options available to ensure proper protections are put into place until a patch can be issued by Microsoft.  The vulnerability enables remote code execution with the same privileges as the calling application and there are proof-of-concept examples of zero-click variants.