CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-24071 Microsoft Windows File Explorer Spoofing Vulnerability

...

CVE-2025-24071

Windows File Explorer contains a spoofing vulnerability (CVE-2025-24071 ) caused by the implicit trust and automatic parsing of .library-ms files. An unauthenticated attacker can craft a malicious .library-ms file containing a UNC path and embed it within a ZIP or RAR archive. When a victim extra...

CVE-2025-24071 Microsoft Windows File Explorer Spoofing Vulnerability

...

Microsoft Windows File Explorer Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

PT-2025-10816

Name of the Vulnerable Software and Affected Versions Microsoft Windows File Explorer affected versions not specified Description A security flaw in Windows File Explorer allows attackers to capture NTLM hashed credentials when a user opens a folder containing a specially crafted .library-ms file...

CVE-2025-24071: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows File Explorer 信息泄露漏洞

Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows File Explorer. An attacker could exploit this vulnerability to obtain sensitive information. The following products and editions are...

VulnCheck KEV: CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability...

CVE-2024-55214

Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the file download functionality...

January 29, 2025—KB5050092 (OS Builds 22621.4830 and 22631.4830) Preview

None None...

January 28, 2025—KB5050094 (OS Build 26100.3037) Preview

None None...

The vulnerability of the File Explorer application (formerly Windows Explorer) of Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the File Explorer application formerly Windows Explorer in Microsoft Windows operating systems is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

CVE-2024-49082

Windows File Explorer Information Disclosure Vulnerability...

CVE-2024-49082

Windows File Explorer Information Disclosure Vulnerability...

CVE-2024-49082

CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...

CVE-2024-49082 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2024-49082 Windows File Explorer Information Disclosure Vulnerability

...

Windows File Explorer Information Disclosure Vulnerability

...

PT-2024-9448 · Microsoft · Windows File Explorer +1

Name of the Vulnerable Software and Affected Versions: Windows File Explorer affected versions not specified Description: The issue is related to incorrect restriction of a directory path name with limited access in the Windows File Explorer application. This can allow a remote attacker to gain...