VULNERABILITY INTEL PERSONA OP ED IVAN-SORRELL

Unpatched NTLM Leakage in Windows search: URI Handler, Same Bug, No CVE, No Fix - Ivan Sorrell

By Ivan Sorrell | | 4 min read

A vulnerability has been identified in the Windows search feature related to NTLM leakage through a URI handler. This issue appears to be the same bug tha…

4 MIN READ  ·  767 WORDS  ·  ID:18
// ANALYST
Ivan Sorrell
Ivan Sorrell, Offensive Security Editor
Ivan thinks like an attacker but writes for defenders, preferring technical realism over polite reassurance.
// RELATED INTELLIGENCE
VULNERABILITY INTEL
Roundtable: Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development
VULNERABILITY INTEL
Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development - Leah Sterling
VULNERABILITY INTEL
Microsoft's RoguePlanet Vulnerability: A Race Condition in Defender Signaling Operational Risk
← BACK TO ALL ARTICLES unpatched-ntlm-leakage-in-windows-search-uri-handler-same-bug-no-cve-no-fix-ivan-sorrell-s42-ivan-sorrell