CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-11-12
Microsoft Windows NTLM Hash Disclosure and Spoofing Vulnerability (CVE-2024-43451) Critical Security Advisory
[Affected Scope] All supported versions of Microsoft Windows and Windows Server operating systems
[Impact] Simple user interaction with a malicious file (such as right-clicking or selecting) triggers NTLM credential disclosure, enabling credential theft and NTLM Relay attacks
[Mitigation] Immediately apply the Microsoft November 2024 cumulative security updates and restrict outbound NTLM traffic via Group Policy and firewalls