CVE-2025-24054

MediumCVSS 5.4/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-73

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2025
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 17, 2025
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-240554.3Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.CVE-2025-240568.8Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.CVE-2025-240577.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-240587.8Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.CVE-2025-240597.8Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locaCVE-2025-24067.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Communication and InforCVE-2025-240607.8Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.CVE-2025-240617.8Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.CVE-2025-240627.8Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.CVE-2025-240637.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2025-240648.1Use after free in DNS Server allows an unauthorized attacker to execute code over a network.CVE-2025-240655.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-24054: Medium severity, CVSS 5.4 | Vulnix