Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Published

2025-03-11T17:16:29.867

Last Modified

2025-07-03T13:23:25.997

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	microsoft	windows_10_1507	< 10.0.10240.20947	Yes
Operating System	microsoft	windows_10_1507	< 10.0.10240.20947	Yes
Operating System	microsoft	windows_10_1607	< 10.0.14393.7876	Yes
Operating System	microsoft	windows_10_1607	< 10.0.14393.7876	Yes
Operating System	microsoft	windows_10_1809	< 10.0.17763.7009	Yes
Operating System	microsoft	windows_10_1809	< 10.0.17763.7009	Yes
Operating System	microsoft	windows_11_23h2	< 10.0.22631.5039	Yes
Operating System	microsoft	windows_11_24h2	< 10.0.26100.3476	Yes
Operating System	microsoft	windows_11_24h2	< 10.0.26100.3476	Yes
Operating System	microsoft	windows_server_2012	r2	Yes
Operating System	microsoft	windows_server_2016	< 10.0.14393.7876	Yes
Operating System	microsoft	windows_server_2019	< 10.0.17763.7009	Yes
Operating System	microsoft	windows_server_2022	< 10.0.20348.3328	Yes
Operating System	microsoft	windows_server_2022_23h2	< 10.0.25398.1486	Yes
Operating System	microsoft	windows_server_2025	< 10.0.26100.3476	Yes

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24071 Vendor Advisory ([email protected])
https://www.vicarius.io/vsociety/posts/cve-2025-24071-spoofing-vulnerability-in-microsoft-windows-file-explorer-detection-scrip Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.vicarius.io/vsociety/posts/cve-2025-24071-spoofing-vulnerability-in-microsoft-windows-file-explorer-mitigation-script Mitigation, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)