Remote Code Execution Vulnerability in Microsoft Windows LNK File Handling

CVE-2025-9491

What is CVE-2025-9491?

A security flaw exists in the handling of .LNK files within Microsoft Windows. This vulnerability allows attackers to create specially crafted LNK files that can mask malicious content from users inspecting the file through the typical Windows user interface. When a user interacts with the malicious page or file, the attacker can execute arbitrary code in the context of the user's session. This highlights the importance of being cautious with LNK files, especially those obtained from untrusted sources.

References