CVE-2017-8464
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
8.8
CVSS 3.1
89.9 %
EPSS (current)
2022-02-10
KEV addition
No
Ransomware
Timeline
Publication, first public exploit and KEV addition on a day axis.
Key facts
Vendor / product: Microsoft / Windows
Published: 2017-06-15 · Due (CISA): 2022-08-10
CWE: – · EU list: no
Exploit references (metadata only)
| Source | Reference | Title | Date |
|---|---|---|---|
| metasploit | exploit/windows/fileformat/cve_2017_8464_lnk_rce | exploit/windows/fileformat/cve_2017_8464_lnk_rce | 2017-06-13 |
| metasploit | exploit/windows/local/cve_2017_8464_lnk_lpe | exploit/windows/local/cve_2017_8464_lnk_lpe | 2017-06-13 |
| exploitdb | 42382 | Microsoft Windows - '.LNK' Shortcut File Code Execution (Metasploit) | 2017-07-26 |
| exploitdb | 42429 | Microsoft Windows - '.LNK' Shortcut File Code Execution | 2017-08-06 |
References only — no downloads or instructions.