September 25, 2026

CVE Watchtower

← Back to CVE List

CVE-2024-43451NVD

Vulnerability Summary

NTLM Hash Disclosure Spoofing Vulnerability
Severity Level
MEDIUM(6.5)
Published Date
Nov 12, 2024
Last Modified
Nov 14, 2024
Exploitation Status
ACTIVE
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-73: Unknown/Unlisted Weakness ↗
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v3.1 Base Metrics — Score 6.5 (MEDIUM)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
ConfidentialityHigh
IntegrityNone
AvailabilityNone

Affected & Patched Versions

Affected Versions
  • Microsoft Windows 10 1507 < 10.0.10240.20826
  • Microsoft Windows 10 1607 < 10.0.14393.7515
  • Microsoft Windows 10 1809 < 10.0.17763.6532
  • Microsoft Windows 10 21h2 < 10.0.19044.5131
  • Microsoft Windows 10 22h2 < 10.0.19045.5131
  • Microsoft Windows 11 22h2 < 10.0.22621.4460
  • Microsoft Windows 11 23h2 < 10.0.22631.4460
  • Microsoft Windows 11 24h2 < 10.0.26100.2314
  • Microsoft Windows Server 2008
  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2016 < 10.0.14393.7515
  • Microsoft Windows Server 2019 < 10.0.17763.6532
  • Microsoft Windows Server 2022 < 10.0.20348.2849
  • Microsoft Windows Server 2022 23h2 < 10.0.25398.1251
  • Microsoft Windows Server 2025 < 10.0.26100.2314
Patched Versions
  • Microsoft Windows 10 1507 10.0.10240.20826
  • Microsoft Windows 10 1607 10.0.14393.7515
  • Microsoft Windows 10 1809 10.0.17763.6532
  • Microsoft Windows 10 21h2 10.0.19044.5131
  • Microsoft Windows 10 22h2 10.0.19045.5131
  • Microsoft Windows 11 22h2 10.0.22621.4460
  • Microsoft Windows 11 23h2 10.0.22631.4460
  • Microsoft Windows 11 24h2 10.0.26100.2314
  • Microsoft Windows Server 2016 10.0.14393.7515
  • Microsoft Windows Server 2019 10.0.17763.6532
  • Microsoft Windows Server 2022 10.0.20348.2849
  • Microsoft Windows Server 2022 23h2 10.0.25398.1251
  • Microsoft Windows Server 2025 10.0.26100.2314
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.

External References