CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-03-11
Windows NTLM File Path Control Spoofing Vulnerability (CVE-2025-24054) Security Advisory
[Affected Scope] Active Directory environments and Windows operating systems utilizing the NTLM authentication protocol
[Impact] Unauthorized remote attackers can control file names or paths to perform network-based spoofing and credential relay attacks
[Mitigation] Apply the latest Microsoft cumulative security updates and restrict NTLM authentication traffic