CVE-2025-24054 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
Medium KEV CVSS: 6.5

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
Vendor
Microsoft
Product
Windows 10 1507
CWE
CWE-73
Yayın Tarihi
2025-03-11 17:16:27
Güncelleme
2026-02-13 21:25:23
Source Identifier
secure@microsoft.com
KEV Date Added
2025-04-17

Kategoriler

CWE-73 Windows 10 1507 MEDIUM Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054 http://seclists.org/fulldisclosure/2025/Apr/28 https://www.exploit-db.com/exploits/52478 https://www.exploit-db.com/exploits/52480 https://www.vicarius.io/vsociety/posts/cve-2025-24054-spoofing-vulnerability-in-windows-ntlm-by-microsoft-detection-script https://www.vicarius.io/vsociety/posts/cve-2025-24054-spoofing-vulnerability-in-windows-ntlm-by-microsoft-mitigation-script https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24054