CVE-2025-24054 Microsoft Windows
Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
- Added
- 2025-04-17
- Federal patch deadline
- 2025-05-08
- Ransomware use
- not known