Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-03 10:18 UTC
Importiert: 2026-06-10 04:39 UTC
CVSS: 4.3
Quelle-ID: thn_global
uid_hash: 427c7db2d84417686b6c4fb542790c7f34a611fde48ccc60e4db2bc633c1a66a

The Hacker News

Inhalt

Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to the attacker.

Like in the case of CVE-2026-33829, which impacted the Windows Snipping Tool's ms-screensketch: URI handler, the newly flagged issue resides in the search: URI handler, per Huntress.

CVE-2026-33829 refers to a spoofing vulnerability that could expose

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-33829	MEDIUM	4.3	MEDIUM	4.3			2026-04-14

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste