Return to CVE list

CVE-2025-24054

6.5

Medium

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

11 Mar 2025

secure@microsoft.com

Modified

View on MITRE Find on GitHub

Description

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

secure@microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054

af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Apr/28