Product:
Windows NTLM
Summary
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. This vulnerability can lead to significant security risks, including unauthorized access to sensitive information. Attackers can exploit this flaw to impersonate legitimate users and gain unauthorized privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-20872 |
Exploitation
To exploit this vulnerability, an attacker must have network access and be able to manipulate file names or paths. By crafting a malicious request that includes a spoofed file name or path, the attacker can trick the system into executing unauthorized actions. This requires user interaction, as the victim must engage with the malicious content for the attack to succeed.
Affected Products
- Windows NTLM: Vulnerable to external control of file name or path, allowing spoofing attacks.
Mitigation
To mitigate this vulnerability, it is essential to apply the latest security updates provided by Microsoft. Additionally, organizations should implement strict access controls and monitor network traffic for suspicious activities. Educating users about the risks of interacting with untrusted content can also help reduce the likelihood of exploitation.