CERT24Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 HashesLoading data…
CERT24Threat Observatory
Period

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Cybersecurity researchers disclosed an unpatched issue in the Windows “search:” URI handler that could be exploited to disclose a user’s NTLMv2 hash to an attacker. Microsoft declined to address the issue, stating that only Important and Critical severity cases meet its servicing threshold.

← Back to intelligence

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Cybersecurity researchers disclosed an unpatched issue in the Windows “search:” URI handler that could be exploited to disclose a user’s NTLMv2 hash to an attacker. Microsoft declined to address the issue, stating that only Important and Critical severity cases meet its servicing threshold.