CVE

CVE-2017-8464

Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

Microsoft · Windows

Date added (CISA)

2022-02-10

Remediation due

2022-08-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file