PULSEUnderground Intel

EN VIVO0señales / 24h

FEED

vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server

← Todos los CVEs

CVE Watch—

CVE-2025-24054

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

CVSS

—

Sin CVSS

EPSS

58.9%

p99

KEV

SÍ

17 abr 2025

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

58.6%EPSS · 30 días59.0%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Añadido a KEV

17 abr 2025

Remediar antes de

8 may 2025

Uso conocido en ransomware

No

Descripción resumida

Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24054

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-322024.3 MED

KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability17d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability32d CVE-2025-266337.0 ALT

KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability27d CVE-2024-490398.8 ALT

KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability28d CVE-2024-434618.8 ALT

KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability21d CVE-2024-382175.4 MED

KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability21d