high CISA KEV

CVE-2024-43451

Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

// Description

Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.

// Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal remediation due Dec 3, 2024 — past due

// Coverage

APT28 Exploits Exchange OWA Zero-Day to Deploy OWAReaper Backdoor
Jul 30, 2026
CVE-2024-43451: How NTLM Hash Disclosure Impacts Windows Systems
Apr 13, 2026