Internet Shortcut Files Security Feature Bypass Vulnerability

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker must send the user a malicious file and convince them to open it.

How could an attacker exploit the vulnerability?
An unauthenticated attacker could send the targeted user a specially crafted file that is designed to bypass displayed security checks. However, the attacker would have no way to force a user to view the attacker-controlled content. Instead, the attacker would have to convince them to take action by clicking on the file link.

Security updates
10.0.22000.2777 — https://support.microsoft.com/help/5034766
10.0.17763.5458 — https://support.microsoft.com/help/5034768
10.0.19044.4046 — https://support.microsoft.com/help/5034763
10.0.20348.2322 — https://support.microsoft.com/help/5034770
10.0.22621.3155 — https://support.microsoft.com/help/5034765
10.0.25398.709 — https://support.microsoft.com/help/5034769