Skip to main content
ZDI-26-294 LOW 3.5 Published Apr 21, 2026

Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability

Microsoft

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must view a folder containing malicious content. The ZDI has assigned a CVSS rating of 3.5.

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy