CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-06-15
Microsoft Windows Shell LNK Remote Code Execution Vulnerability (CVE-2017-8464) Analysis and Mitigation Guide
[Affected Scope] All end-of-life and legacy operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Attackers can execute arbitrary code with the privileges of the local user simply by having the user open a folder containing a crafted .LNK file, without requiring any execution or double-click
[Mitigation] Apply official Microsoft security patches immediately, disable Autorun features, and restrict access to untrusted removable media and network shares