Skip to content
OpenAdvisories
Medium · 6.5 Exploitation more likely CVE-2026-50508 EUVD-2026-35529GHSA-hr5m-mp7v-gw8f

Windows NTLM Spoofing Vulnerability

Published Jun 9, 2026 · Updated Nov 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1607 Product: Windows 11 version 22H2 Product: Windows Server 2012 Product: Windows Server 2012 (Server Core installation) Product: Windows Server 2012 R2 Product: Windows Server 2012 R2 (Server Core installation) Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2022 Product: Windows Server version 2004 Platform: Windows

Description

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Affected products

VendorProductAffectedFixed
Microsoft Windows 10 Version 1607 10.0.14393.0 – < 10.0.14393.9234 10.0.14393.9234
Microsoft Windows 11 version 22H2 10.0.22621.0 – < 10.0.22631.7219 10.0.22631.7219
Microsoft Windows Server 2012 6.2.9200.0 – < 6.2.9200.26132 6.2.9200.26132
Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.0 – < 6.2.9200.26132 6.2.9200.26132
Microsoft Windows Server 2012 R2 6.3.9600.0 – < 6.3.9600.23228 6.3.9600.23228
Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.0 – < 6.3.9600.23228 6.3.9600.23228
Microsoft Windows Server 2016 10.0.14393.0 – < 10.0.14393.9234 10.0.14393.9234
Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.0 – < 10.0.14393.9234 10.0.14393.9234
Microsoft Windows Server 2022 10.0.20348.0 – < 10.0.20348.5256 10.0.20348.5256
Microsoft Windows Server version 2004 10.0.0 – < 10.0.19045.7417 10.0.19045.7417

Advisories 2

References