ZDI-26-294
LOW 3.5
Published
Apr 21, 2026
Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability
Microsoft
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must view a folder containing malicious content. The ZDI has assigned a CVSS rating of 3.5.