Skip to main content
ZDI-26-605 LOW 3.3 Published Aug 24, 2026

Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability

Microsoft

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy