Microsoft Windows NTLM Spoofing Vulnerability

A vulnerability in Windows NTLM allows an unauthorized attacker to perform spoofing over a network by externally controlling file names or paths. This issue affects multiple Windows Server and Windows 10/11 versions. The vulnerability arises from how NTLM handles file names and paths, potentially allowing attackers to manipulate these elements for spoofing purposes.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing attacks over the network.

Remediation

Users can apply the security updates provided by Microsoft for this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the product family section.