CVE-2023-38146: ThemeBleed vulnerability exploit

CVE-2023-38146 is a critical zero-day remote code execution vulnerability in Windows 11 that can be exploited by opening specially crafted ".theme" files (which reference malicious ".msstyles"), enabling attackers to execute arbitrary code; ThreatLocker reproduced the exploit (ThemeBleed) and the advisory recommends applying Microsoft patches, updating security intelligence, and using ThreatLocker allowlisting and Ringfencing™ to mitigate risk.