Microsoft Windows NTLM Spoofing Vulnerability

Vulnerability

A vulnerability in Windows NTLM allows an unauthorized attacker to locally perform spoofing by exposing sensitive information to an unauthorized actor. This issue affects multiple versions of Windows 11, Windows Server 2025, and various ARM64-based systems.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing actions within the affected NTLM implementation.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Knowledge Base articles are also available for reference.

Added: Oct 14, 2025, 6:01 PM
Updated: Oct 14, 2025, 8:28 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
4.7
remediation
0.0
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.