Security researcher Nafiez has publicly disclosed a previously unknown vulnerability affecting Windows LNK files (shortcuts) that can potentially allow attackers to execute code remotely without user interaction. Despite releasing a working proof-of-concept (PoC), Microsoft has declined to patch the flaw, stating it “does not meet their security bar for servicing”.