So the example states that one can get an RCE by just sending a prepared email to an exchange server. However, looking at the affected OS version it seems that anything can be prepared that way that could be indexed automatically by windows search.
It seems to me that close to 0-click could also be achieved in other ways by e. g. putting a prepared file into an arbitrary download or chat message that later gets indexed. The Exchange thing is huge, but then again the server is better maintained than most of the user/lab PCs.
So the example states that one can get an RCE by just sending a prepared email to an exchange server. However, looking at the affected OS version it seems that anything can be prepared that way that could be indexed automatically by windows search.
You can reach Windows Search via Exchange Server. A prepared mail doesn't even need to be read in order to get processed. 0-click.
It seems to me that close to 0-click could also be achieved in other ways by e. g. putting a prepared file into an arbitrary download or chat message that later gets indexed. The Exchange thing is huge, but then again the server is better maintained than most of the user/lab PCs.