ZDI-26-083 LOW 3.3 Published Feb 12, 2026

Microsoft Windows searchConnector-ms NTLM Response Information Disclosure Vulnerability

Microsoft

This vulnerability in Microsoft Windows allows attackers to capture and disclose NTLM authentication responses, a critical component used for network authentication and access validation. An attacker can exploit this by tricking a user into visiting a malicious webpage or opening a crafted file, potentially compromising user credentials and enabling unauthorized access. Security teams should prioritize applying Microsoft's patch once available and educate users to avoid suspicious links and files, though the low CVSS score of 3.3 suggests this poses limited immediate risk compared to other vulnerabilities.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy