Windows NTLM vulnerabilities
6 known CVE vulnerabilities in Windows NTLM, translated and rated.
- CVE-2026-20925Medium
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-20872Medium
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-24054MediumActively exploited
A vulnerability in Windows NTLM allows external control of file name or path. An unauthorized attacker can perform spoofing over a network.
- CVE-2024-43451MediumActively exploited
NTLM Hash Disclosure Spoofing Vulnerability allows for the disclosure of NTLM hashes. An attacker could exploit this to impersonate a user or system.
- CVE-2026-83709High
A heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
- CVE-2026-50508Medium
A vulnerability in Windows NTLM exposes sensitive information to an unauthorized actor, allowing spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS