Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation

Microsoft silently patched CVE-2025-9491, a Windows Shortcut (LNK) file UI misinterpretation vulnerability with CVSS score 7.8/7.0. The flaw has been actively exploited by multiple threat actors since 2017. The vulnerability was addressed in Microsoft's November 2025 Patch Tuesday updates. ACROS Security's 0patch reported on this silent fix. The vulnerability could lead to remote exploitation through malicious LNK files.