What happened
NTLM hash disclosure in Windows File Explorer via malicious .library-ms SMB connector.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 52325Windows File Explorer Windows 10 Pro x64 - TAR ExtractionDaniel Miranda2025-06-13VerifiedExploit-DB 52310Windows File Explorer Windows 11 (23H2) - NTLM Hash DisclosureMohammed Idrees Banyamer2025-05-29VerifiedSploitusNTLM hash disclosure in Windows File Explorer via malicious .library-ms SMB connector.KitPloit2026-10-14T05:02:08Candidatekitploit.comNTLM hash disclosure in Windows File Explorer via malicious .library-ms SMB connector.en2026-10-14T05:02:08CandidateSploitusExploit for CVE-2025-24071. CVSS 6.5.Sploitus index2026-10-19T11:59:39+00:00CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.