EXPOSURES › CVE-2017-8464
CVE-2017-8464
HIGH ⌖ ON CISA KEV · EXPLOITEDA crafted .LNK file triggered remote code execution in Windows Shell, a flaw actively exploited in the wild and now on CISA's KEV list.
An attacker could execute arbitrary code by tricking a user into opening a malicious .LNK file, bypassing standard file protections. DIB organizations must ensure all Windows systems are patched against this known vulnerability, as it remains actively exploited and is now on CISA's KEV list, indicating it is a high-priority threat.
Shame score — A fundamental flaw in Windows Shell that was actively exploited in the wild and remains unpatched for years, allowing remote code execution via a simple file trick.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |