CVE-2017-8464 — Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2022-02-10 00:00 UTC
  • Importiert: 2026-10-20 22:46 UTC
  • CVSS: 8.8
  • Quelle-ID: cisa_kev
  • uid_hash: b63f7d33e71019ff1fafc8fc7107e3701aeba95a2110754fce711d7adef9a2b8

Inhalt

Vendor / Project: Microsoft Product: Windows Description: Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file Required Action: Apply updates per vendor instructions. Due Date: 2022-08-10 Ransomware Campaign Use: Unknown Notes: https://nvd.nist.gov/vuln/detail/CVE-2017-8464

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2017-8464

HIGH

8.8

HIGH

8.8

2017-06-15

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CISA – Known Exploited Vulnerabilities (KEV)

cisa_kev

threat_intel cisa, kev - de https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json