zdi-can-25373

ZDI-CAN-25373 is a Windows zero-day vulnerability tracked by Trend Micro that has been exploited by nation-state hackers since 2017. The flaw manipulates how Windows handles shortcut (.lnk) files, enabling covert attacks. Despite active exploitation, Microsoft has stated the bug does not meet its bar for servicing and has not issued an immediate patch. This tag covers discussions about the vulnerability's mechanics, its decade-long exploitation history, and Microsoft's response. It is relevant for security researchers, IT administrators, and Windows users concerned about unpatched exploits and nation-state threat actors targeting Windows systems.