Microsoft, Latest update of Windows 11 has announced that it has started rolling out the 24H2 version to more systems. On the same day, he also announced a new vulnerability that could allow NTLM credentials to be stolen using malware.

Zero-day vulnerability, It affects all Windows client and server versions, including Windows 11 24H2.

NTLM credentials are compromised

This vulnerability is triggered when the user simply views a malicious file in Windows Explorer. For example, simply open a shared folder or a USB drive that contains a malicious file, or view the folder where this file was downloaded. This way attackers can do thatn NTLM can record login details.

The 0patch team that conducted the research Windows Server 2025 He explained why it was not on the list, as it was still in the testing phase and included improvements related to NTLM. Windows Server 2025 was released in November and compatibility testing is still ongoing. Once testing is complete, zero-day patches will also be released.

MicrosoftAware of NTLM’s security issues, he stated that he will discontinue this feature and recommends users switch to more secure and modern alternatives.