Microsoft Windows NTLM Spoofing Vulnerability Allowing Unauthorized Network-Based Attacks

A vulnerability in Windows NTLM allows unauthorized attackers to perform spoofing attacks over the network by externally controlling file names or paths. This issue affects multiple Windows Server and Windows 10 versions, as well as Windows 11 and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing over the network.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the 'Security Update Guide'.