Microsoft quietly fixes LNK vulnerability used for years
Microsoft’s November 2025 Patch Tuesday fixed 63 vulnerabilities, including CVE-2025-9491 in Windows LNK files The bug allows attackers to hide malicious commands in shortcut files, thus enabling RCE attacks. Exploited since 2017 by state-sponsored groups in China, Iran, North Korea and Russia; severity rated 7.8/10 The November 2025 Patch Tuesday cumulative update fixed a vulnerability […]
Microsoft quietly fixes LNK vulnerability used for years Read More »









