Description
Windows NTLM V1 Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 11 Version 24H2 | 10.0.26100.0 – < 10.0.26100.2894 | 10.0.26100.2894 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0 – < 10.0.25398.1369 | 10.0.25398.1369 |
| Microsoft | Windows Server 2025 | 10.0.26100.0 – < 10.0.26100.2894 | 10.0.26100.2894 |
| Microsoft | Windows Server 2025 (Server Core installation) | 10.0.26100.0 – < 10.0.26100.2894 | 10.0.26100.2894 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | squid | 7.1-1 | — |
| Debian 13 | squid | No fix yet | — |
| Debian 12 | squid | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | squid | No fix yet | — |
| Ubuntu 22.04 LTS | squid | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | squid | No fix yet | — |
| Ubuntu Pro 18.04 LTS | squid3 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | squid3 | No fix yet | — |
Advisories 3
- WID-SEC-2025-0091 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 25, 2025
- NCSC-2025-0010 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Jan 14, 2025
- MSRC-CVE-2025-21311 Windows NTLM V1 Elevation of Privilege Vulnerability Microsoft Security Response Center · Jan 14, 2025
References
- Windows NTLM V1 Elevation of Privilege Vulnerability vendor-advisory patch