PULSEUnderground Intel

EN VIVO63señales / 24h

FEED

ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities

← Todos los CVEs

CVE Watch—

CVE-2025-24054

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

CVSS

—

Sin CVSS

EPSS

62.3%

p99

KEV

SÍ

17 abr 2025

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

58.9%EPSS · 30 días62.3%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Añadido a KEV

17 abr 2025

Remediar antes de

8 may 2025

Uso conocido en ransomware

No

Descripción resumida

Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24054

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-969518.8 ALT

KEV—72Microsoft Windows Command Injection Vulnerability10h CVE-2026-858807.8 ALT

KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22d CVE-2026-819637.8 ALT

KEV—60Microsoft Windows Link Following Vulnerability37d CVE-2026-322024.3 MED

KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability78d CVE-2025-622217.8 ALT

KEV—75Microsoft Windows Use After Free Vulnerability21d