CVE-2025-24071

Microsoft Windows File Explorer Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Affected

Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 22H2

CVSS v3.1 MICROSOFT

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

23.33% chance of exploitation in the next 30 days, 98th percentile

Published

2025-03-11

Updated

2026-02-13

Proof-of-concept exploits (30)

• https://www.vicarius.io/vsociety/posts/cve-2025-24071-spoofing-vulnerability-in-microsoft…
• 0x6rss/CVE-2025-24071_PoC409★ · 2025-03-20
• AC8999/CVE-2025-240710★ · 2025-09-05
• Cesar-http/Windows-Explorer-CVE-2025-240711★ · 2025-04-02
• DeshanFer94/CVE-2025-24071-POC-NTLMHashDisclosure-1★ · 2025-06-13
• FOLKS-iwd/CVE-2025-24071-msfvenom25★ · 2025-03-18
• LOOKY243/CVE-2025-24071-PoC3★ · 2025-05-27
• Marcejr117/CVE-2025-24071_PoC24★ · 2025-05-15
• Royall-Researchers/CVE-2025-240710★ · 2025-07-05
• TH-SecForge/CVE-2025-240713★ · 2025-06-09
• ThemeHackers/CVE-2025-2407134★ · 2025-03-27
• afkfr0mkeyb0ard/CustomKaliSetup0★ · 2026-06-17
• aleongx/CVE-2025-240710★ · 2025-03-19
• basekilll/CVE-2025-24054_PoC4★ · 2025-04-18
• cesarbtakeda/Windows-Explorer-CVE-2025-240711★ · 2025-04-02
• ctabango/CVE-2025-24071_PoCExtra2★ · 2025-08-21
• ex-cal1bur/SMB_CVE-2025-240714★ · 2025-06-11
• f4dee-backup/CVE-2025-240710★ · 2025-06-15
• helidem/CVE-2025-24054_CVE-2025-24071-PoC22★ · 2025-11-05
• pswalia2u/CVE-2025-24071_POC0★ · 2025-04-21
• rubbxalc/CVE-2025-240711★ · 2025-03-27
• xigney/CVE-2025-24054_PoC4★ · 2025-04-18
• Abdelrahman0Sayed/CVE-2025-240711★ · 2025-12-16
• Fomovet/cve-2025-240710★ · 2026-06-21
• ephunter/CVE-2025-24071-Exploit0★ · 2025-03-21
• hyperchk/CVE-2025-24071-POC0★ · 2026-05-20
• kaIIsyms/CVE-2025-240710★ · 2025-03-18
• zbs54/Blackash-CVE-2025-240710★ · 2025-06-09
• buffertrychar/CVE-2025-24071-POC0★ · 2026-05-20
• BardLaudian/CVE-2025-240710★ · 2026-09-24

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/52325
• https://www.exploit-db.com/exploits/52310

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24071
• https://www.vicarius.io/vsociety/posts/cve-2025-24071-spoofing-vulnerability-in-microsoft…

References

• CVE Record
• NVD entry

Related

• CVE-2025-24054
• CVE-2009-3999
• CVE-2018-9276
• CVE-2024-40453
• CVE-2025-27636
• CVE-2025-32463