CVE-2025-24996

CVE-2025-24996 is a vulnerability affecting Windows NTLM. It stems from external control of the file name or path, which could allow an unauthorized attacker to perform spoofing over a network. This means an attacker could potentially trick users into interacting with a malicious file or system, possibly leading to the theft of sensitive information or system compromise. The vulnerability affects multiple Windows operating systems, including Windows 10, Windows 11, and various Windows Server editions. Microsoft has released security updates to address this vulnerability.