Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

A spoofing vulnerability allowing the disclosure of NTLMv2 hashes has been identified in various supported versions of Microsoft Windows. This vulnerability could be exploited to authenticate as the user whose hash was disclosed.

Impact

Exploitation of this vulnerability leads to the disclosure of a user's NTLMv2 hash, allowing an attacker to authenticate as that user.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5052000, KB5052040, KB5052016, KB5052038, and KB5052006.