CVE-2024-43451Vulnerability
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by ESET WeLiveSecurity (ES) · last reported
Last reported 7 months ago
CISA KEVAdded 12 Nov 2024
Fix due 3 Dec 2024
Used by ransomware: not knownCISA KEV catalogue
Fix due 3 Dec 2024
Used by ransomware: not knownCISA KEV catalogue
EPSS84.3%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Mapa de actividad de malware en América Latina“El grupo utilizó, entre otros recursos, la explotación de una vulnerabilidad antigua (CVE-2024-43451) para ayudar a comprometer el entorno.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2012-0143
Thanks — we review every report.