Not all systems that operate arbitrary instructions are afflicted. E.g. Total Commander will not be: it phone calls ShellExecute even for command traces.
A remote, unauthenticated attacker could potentially execute https://zubairtkne687742.wikiannouncement.com/user