Product:
Windows NTLM
Summary
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally. This vulnerability can lead to unauthorized access and manipulation of files. Attackers can exploit this weakness if they have local access to the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-21249 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system and can manipulate file names or paths to perform spoofing. This requires user interaction, as the attacker needs to trick the user into executing the malicious file or path. Once executed, the attacker can gain unauthorized access to sensitive information or perform actions on behalf of the user.
Affected Products
- Windows NTLM: Vulnerable to local spoofing attacks due to external control of file names or paths.
Mitigation
To mitigate this vulnerability, users should ensure that they do not execute untrusted files or paths. Regular updates and patches from Microsoft should be applied to protect against known vulnerabilities. Additionally, implementing strict access controls can help limit the potential for exploitation.