Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-24071

Microsoft Windows File Explorer Spoofing Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 10.0.10240.20947, 10.0.14393.7876, 10.0.17763.7009, 10.0.19044.5608, 10.0.19045.5608, and 6 more
2 on Exploit-DB, 23 proofs of concept on GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Public exploit on Exploit-DB

    EDB-52310, EDB-52325

  4. Record last updated
  5. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • Microsoft Windows 10 Version 1507

    From 10.0.10240.0 · fixed in 10.0.10240.20947

  • Microsoft Windows 10 Version 1607

    From 10.0.14393.0 · fixed in 10.0.14393.7876

  • Microsoft Windows 10 Version 1809

    From 10.0.17763.0 · fixed in 10.0.17763.7009

  • Microsoft Windows 10 Version 21H2

    From 10.0.19044.0 · fixed in 10.0.19044.5608

  • Microsoft Windows 10 Version 22H2

    From 10.0.19045.0 · fixed in 10.0.19045.5608

  • Microsoft Windows 11 version 22H2

    From 10.0.22621.0 · fixed in 10.0.22621.5039

  • Microsoft Windows 11 version 22H3

    From 10.0.22631.0 · fixed in 10.0.22631.5039

  • Microsoft Windows 11 Version 23H2

    From 10.0.22631.0 · fixed in 10.0.22631.5039

  • Microsoft Windows 11 Version 24H2

    From 10.0.26100.0 · fixed in 10.0.26100.3476

  • Microsoft Windows Server 2012 R2

    From 6.3.9600.0 · fixed in 6.3.9600.22470

  • Microsoft Windows Server 2012 R2 (Server Core installation)

    From 6.3.9600.0 · fixed in 6.3.9600.22470

  • Microsoft Windows Server 2016

    From 10.0.14393.0 · fixed in 10.0.14393.7876

  • Microsoft Windows Server 2016 (Server Core installation)

    From 10.0.14393.0 · fixed in 10.0.14393.7876

  • Microsoft Windows Server 2019

    From 10.0.17763.0 · fixed in 10.0.17763.7009

  • Microsoft Windows Server 2019 (Server Core installation)

    From 10.0.17763.0 · fixed in 10.0.17763.7009

  • Microsoft Windows Server 2022

    From 10.0.20348.0 · fixed in 10.0.20348.3328

  • Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

    From 10.0.25398.0 · fixed in 10.0.25398.1486

  • Microsoft Windows Server 2025

    From 10.0.26100.0 · fixed in 10.0.26100.3476

  • Microsoft Windows Server 2025 (Server Core installation)

    From 10.0.26100.0 · fixed in 10.0.26100.3476

References 26

msrc.microsoft.com

Exploit-DB

GitHub · 0x6rss/CVE-2025-24071_PoC

GitHub · AC8999/CVE-2025-24071

GitHub · Abdelrahman0Sayed/CVE-2025-24071

GitHub · BardLaudian/CVE-2025-24071

GitHub · DeshanFer94/CVE-2025-24071-POC-NTLMHashDisclosure-

GitHub · FOLKS-iwd/CVE-2025-24071-msfvenom

GitHub · Fomovet/cve-2025-24071

GitHub · LOOKY243/CVE-2025-24071-PoC

GitHub · Marcejr117/CVE-2025-24071_PoC

GitHub · Royall-Researchers/CVE-2025-24071

GitHub · TH-SecForge/CVE-2025-24071

GitHub · ThemeHackers/CVE-2025-24071

GitHub · aleongx/CVE-2025-24071

GitHub · buffertrychar/CVE-2025-24071-POC

GitHub · c4bsec/Windows-Explorer-CVE-2025-24071

GitHub · ctabango/CVE-2025-24071_PoCExtra

GitHub · ephunter/CVE-2025-24071-Exploit

GitHub · ex-cal1bur/SMB_CVE-2025-24071

GitHub · f4dee-backup/CVE-2025-24071

GitHub · kaIIsyms/CVE-2025-24071

GitHub · pswalia2u/CVE-2025-24071_POC

GitHub · rubbxalc/CVE-2025-24071

GitHub · zbs54/Blackash-CVE-2025-24071