Windows NTLM vulnerability exploited in multiple attack campaigns (CVE-2025-24054)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-43451 | NTLMv2 Hash Disclosure Spoofing Vulnerability in Microsoft Windows | 6.5 | 84% | KEV | KEV |
| CVE-2025-24054 | NTLM Hash Disclosure Spoofing Vulnerability in Microsoft Windows | 5.4 | 62% | KEVPoC ×3 | KEV |
| CVE-2025-24071 | Windows File Explorer Spoofing Vulnerability Exposes Authentication Credentials | 6.5 | 23% | PoC ×2 |
From the original article
3 min read at helpnetsecurity.com
CVE-2025-24054, a Windows NTLM hash disclosure vulnerability that Microsoft has issued patches for last month, has been leveraged by threat actors in campaigns targeting government and private institutions in Poland and Romania.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.