CVE-2025-59284: Windows NTLM Spoofing Vulnerability

Medium severity · published Oct 14, 2025

CVE-2025-59284

Windows NTLM Spoofing Vulnerability

5.5

CVSS

EPSS

On KEV

Description

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 63% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Windows 11 Version 23H2 · Microsoft

10.0.22631.0 before 10.0.22631.6060 · source: vendor

Windows 11 Version 24H2 · Microsoft

10.0.26100.0 before 10.0.26100.6899 · source: vendor

Windows 11 Version 25H2 · Microsoft

10.0.26200.0 before 10.0.26200.6899 · source: vendor

Windows 11 version 22H2 · Microsoft

10.0.22621.0 before 10.0.22621.6060 · source: vendor

Windows 11 version 22H3 · Microsoft

10.0.22631.0 before 10.0.22631.6060 · source: vendor

Windows Server 2025 · Microsoft

10.0.26100.0 before 10.0.26100.6899 · source: vendor, NVD

Windows Server 2025 (Server Core installation) · Microsoft

10.0.26100.0 before 10.0.26100.6899 · source: vendor

Windows 11 22h2 · Microsoft

before 10.0.22621.6060 · source: NVD

Windows 11 23h2 · Microsoft

before 10.0.22631.6060 · source: NVD

Windows 11 24h2 · Microsoft

before 10.0.26100.6899 · source: NVD

Windows 11 25h2 · Microsoft

before 10.0.26200.6899 · source: NVD

Affected product

Windows 11 version 22H2

Microsoft

All Windows 11 version 22H2 CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-59284

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-59284

Vendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59284