Microsoft fixes years old actively exploited .lnk flaw in Windows

Microsoft has addressed a security flaw in Windows that has been exploited since at least 2017. The company has not made an official announcement about the fix, but it was spotted by 0patch. The flaw is known as the Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability and has been tracked as CVE-2025-9491. The fix was included in the November batch of updates for Windows. The vulnerability has a security score of 7.7, meaning it represents a high risk, and it is not clear why it has taken so long for Microsoft to fix it. The description of… [Continue Reading]