CVE-2024-3566 is a critical command injection vulnerability affecting Windows applications that indirectly use the CreateProcess function under certain conditions. This flaw allows an unauthenticated attacker to execute arbitrary commands with high impact on confidentiality, integrity, and availability.