CVE-2025-24054 — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Description

Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer