Windows NTLM V1 Elevation of Privilege Vulnerability
Weakness
The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_11_24h2 | Microsoft | * | 10.0.26100.2894 (excluding) |
| Windows_server_2022_23h2 | Microsoft | * | 10.0.25398.1369 (excluding) |
| Windows_server_2025 | Microsoft | * | 10.0.26100.2894 (excluding) |
| Squid | Ubuntu | devel | * |
| Squid | Ubuntu | esm-infra/focal | * |
| Squid | Ubuntu | jammy | * |
| Squid | Ubuntu | noble | * |
| Squid | Ubuntu | plucky | * |
| Squid | Ubuntu | upstream | * |
| Squid3 | Ubuntu | esm-infra/bionic | * |
| Squid3 | Ubuntu | esm-infra/xenial | * |