CVE-2025-24054
NTLM Hash Disclosure Spoofing Vulnerability
KEVMEDIUM 5.4EPSS 62.3%
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- Affected
- Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 22H2
- CVSS v3.1 NVD
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - CVSS v3.1 MICROSOFT
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS
- 62.27% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2025-04-17
- Published
- 2025-03-11
- Updated
- 2026-02-13
Proof-of-concept exploits (16)
- https://www.vicarius.io/vsociety/posts/cve-2025-24054-spoofing-vulnerability-in-windows-n…
- 0x6rss/CVE-2025-24071_PoC409★ · 2025-03-20
- Marcejr117/CVE-2025-24071_PoC24★ · 2025-05-15
- Royall-Researchers/CVE-2025-240710★ · 2025-07-05
- S4mma3l/CVE-2025-240540★ · 2025-05-01
- basekilll/CVE-2025-24054_PoC4★ · 2025-04-18
- helidem/CVE-2025-24054_CVE-2025-24071-PoC22★ · 2025-11-05
- moften/CVE-2025-240541★ · 2025-05-19
- pswalia2u/CVE-2025-24071_POC0★ · 2025-04-21
- xigney/CVE-2025-24054_PoC4★ · 2025-04-18
- Fomovet/cve-2025-240540★ · 2026-06-21
- SecurityLayer404/CVE-2025-24054-24071---Metasploit-Module0★ · 2026-04-01
- Untouchable17/CVE-2025-240542★ · 2025-11-24
- simantchaudhari/CVE-2025-24054-PoC0★ · 2026-05-01
- Fomovet/cve-2025-240710★ · 2026-06-21
- kaleth4/CVE--2025-240540★ · 2026-04-03
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/52480
- https://www.exploit-db.com/exploits/52478
- https://www.exploit-db.com/exploits/52280
Security advisories
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054
- https://www.vicarius.io/vsociety/posts/cve-2025-24054-spoofing-vulnerability-in-windows-n…