CVE-2017-8464
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
CVSS
—
Sem CVSS
EPSS
90.0%
p100
KEV
SIM
10 de fev. de 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
90.0%EPSS · 30 dias90.0%
2026-10-082026-11-05
Produto
Microsoft / Windows
Vulnerabilidade
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Adicionado ao KEV
10 de fev. de 2022
Corrigir até
10 de ago. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2017-8464
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-969518.8 ALT95.6%
KEV—79Microsoft Windows Command Injection Vulnerability7dCVE-2026-858807.8 ALT33.0%
KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability42dCVE-2026-819637.8 ALT33.7%
KEV—60Microsoft Windows Link Following Vulnerability58dCVE-2026-322024.3 MÉD99.4%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability10dCVE-2026-208055.5 MÉD94.5%
KEV—78Microsoft Windows Information Disclosure Vulnerability98dCVE-2025-622217.8 ALT84.8%
KEV—75Microsoft Windows Use After Free Vulnerability41d