CVE-2025-24054

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Windows 10 1507

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

11. Mär 2025

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054
• Hinweis
  https://www.exploit-db.com/exploits/52478
• Hinweis
  https://www.exploit-db.com/exploits/52480
• Hinweis
  https://www.vicarius.io/vsociety/posts/cve-2025-24054-spoofing-vulnerability-in-windows-ntlm-by-microsoft-detection-script
• Hinweis
  https://www.vicarius.io/vsociety/posts/cve-2025-24054-spoofing-vulnerability-in-windows-ntlm-by-microsoft-mitigation-script
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24054
• CISA
  Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
• NVD
  CVE-2025-24054