What are the conditions under which the CVE-2017-8464 vulnerability can be triggered?

The vulnerability can be triggered in three main scenarios: (1) when the system has USB AutoPlay enabled and a malicious USB drive is inserted, (2) when the user accesses a network share containing a malicious .lnk file, or (3) when the user directly browses to a directory with the crafted shortcut. No user interaction beyond these actions is required to exploit the flaw. This is explained in detail in the [Exploitation Testing of Windows Lnk Remote Code Execution Vulnerability (CVE-2017-8464)](/news/exploitation-testing-of-windows-lnk-remote-code-execution-vulnerability-cve-2017-8464) article.