Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2025-24054

CVSS 6.5 Actively exploited (KEV) 1 detection found
View on NVD →
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Detection rules

Source Rule Status Updated
sigma Suspicious Creation of .library-ms File — Potential CVE-2025-24054 Exploit experimental 2025-04-20