Actively exploited in the wild
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-11-12. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-43451
MediumCVSS 6.5KEVSummary
NTLM Hash Disclosure Spoofing Vulnerability allows for the disclosure of NTLM hashes. An attacker could exploit this to impersonate a user or system.
Risk Assessment
Disclosure of NTLM hashes could enable an attacker to perform pass-the-hash attacks or other techniques using captured credentials.
Recommendation
Apply Microsoft security updates and enable protections against NTLM hash disclosure if possible.
Other vulnerabilities in Windows NTLM
See all- CVE-2026-20925Medium
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-20872Medium
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-24054MediumActively exploited
A vulnerability in Windows NTLM allows external control of file name or path. An unauthorized attacker can perform spoofing over a network.
- CVE-2026-50508Medium
A vulnerability in Windows NTLM exposes sensitive information to an unauthorized actor, allowing spoofing over a network.
Original NVD description (English source)
NTLM Hash Disclosure Spoofing Vulnerability