CVE-2024-43461 was exploited as a zero-day vulnerability before being patched by Microsoft.
Attackers can hide file types to deceive users into opening malicious files.
Collaborative discovery of the vulnerability involved both Microsoft and Trend Micro's Zero Day Initiative.