CVE-2025-9491 is a high-severity remote code execution vulnerability in Microsoft Windows related to the handling of .LNK files. The flaw allows crafted .LNK files to misrepresent UI content, hiding hazardous data from users. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page, enabling attackers to execute arbitrary code with the current user's privileges.