0Patch : Micropatches released for SCF File NTLM Hash Disclosure Vulnerability

Topic

New Reply

Micropatches released for SCF File NTLM Hash Disclosure Vulnerability (0day)

While patching a SCF File NTLM hash disclosure issue on our security-adopted Windows versions, our researchers discovered a related vulnerability on all Windows Workstation and Server versions from Windows 7 and Server 2008 R2 to the latest Windows 11 v24H2 and Server 2025. The vulnerability allows an attacker to obtain user’s NTLM credentials by having the user view a malicious file in Windows Explorer – e.g., by opening a shared folder or USB disk with such file, or viewing the Downloads folder where such file was previously automatically downloaded from attacker’s web page…

We reported this issue to Microsoft, and – as usual – issued micropatches for it that will remain free until Microsoft has provided an official fix…

Since this is a “0day” vulnerability with no official vendor fix available, we are providing our micropatches for free until such fix becomes available…

We are withholding details on this vulnerability until Microsoft’s fix becomes available to minimize the risk of malicious exploitation. ..

4 users thanked author for this post.

CraigS26, jburk07, Lars220, Cybertooth

Reply | Quote

Replies

Microsoft is deprecating NTLM

Reply | Quote

I associated Opatch with Windows ONLY. Alex’s 1st Link produced a nice surprise About OFFICE I was unaware of (several years of Opatch PRO for me thanks to Susan’s prior post/advice).

Did you know Opatch will security-adopt Windows 10 — and — Office 2016 (mine) /2019 — when they go out of support in October 2025, allowing you to keep using them for at least 5 more years? Read more about it here.

W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / Macrium Pd vX / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU = 0

3 users thanked author for this post.

Lars220, Cybertooth, Alex5723

Reply | Quote