Microsoft has issued fixes addressing a total of 89 new Common Vulnerabilities and Exposures (CVEs), including four critical issues and one classified as a full zero-day.
CVE-2024-43451 is a spoofing vulnerability in NTLM Hash that could lead to 'total loss of confidentiality,' as user authentication hashes are exposed to attackers.
NTLM is an outdated security protocol that still presents significant risks, with its improper handling of file interactions being exploited without full file execution.
The vulnerability's severity might seem low, yet its potential impact is significant, as it may allow attackers to authenticate as users with minimal interaction.
Collection
[
|
...
]