MSHTML Framework Security Feature Bypass Vulnerability

According to the CVSS metric, the attack vector is user interaction is required (UI:R). How could an attacker exploit this security feature bypass vulnerability?
An attacker could exploit this vulnerability by convincing a user to open a malicious HTML file or shortcut (.lnk) file delivered through a link, email attachment, or download. The specially crafted file manipulates browser and Windows Shell handling, causing the content to be executed by the operating system. This allows the attacker to bypass security features and potentially achieve code execution.

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
This update address a vulnerability that bypasses prompts when executing a file.

Security updates
10.0.28000.1575 — https://support.microsoft.com/help/5077179
10.0.17763.8389 — https://support.microsoft.com/help/5075904
10.0.20348.4773 — https://support.microsoft.com/help/5075906
10.0.20348.4711 — https://support.microsoft.com/help/5075943
10.0.19044.6937 — https://support.microsoft.com/help/5075912
10.0.26100.32370 — https://support.microsoft.com/help/5075899
10.0.26100.32313 — https://support.microsoft.com/help/5075942
10.0.26200.7840 — https://support.microsoft.com/help/5077181
10.0.26200.7781 — https://support.microsoft.com/help/5077212
10.0.22631.6649 — https://support.microsoft.com/help/5075941
10.0.25398.2149 — https://support.microsoft.com/help/5075897
10.0.14393.8868 — https://support.microsoft.com/help/5075999
6.2.9200.25923 — https://support.microsoft.com/help/5075971
6.3.9600.23022 — https://support.microsoft.com/help/5075970