CVE-2025-24054

Microsoft Windows — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
⚠️ CVSS 3.1  6.5 / 10 — MEDIUM 🔴 CISA Known Exploited Vulnerability

Overview

Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24054

Key Details

PropertyValue
CVE ID CVE-2025-24054
Vendor / Product Microsoft — Windows
NVD Published2025-03-11
NVD Last Modified2026-02-13
CVSS 3.1 Score6.5
CVSS 3.1 VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
SeverityMEDIUM
CWE CWE-73
CISA KEV Added2025-04-17
CISA KEV Deadline2025-05-08
Known Ransomware Use No

CVSS 3.1 Breakdown

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Required Action

CISA BOD 22-01 Deadline: 2025-05-08. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Timeline

DateEvent
2025-04-17Added to CISA Known Exploited Vulnerabilities catalog
2025-05-08CISA BOD 22-01 remediation deadline

References

ResourceType
NVD — CVE-2025-24054 Vulnerability Database
CISA KEV Catalog Entry US Government