ZDI-26-294: (0Day) Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability
Source Zero Day Initiative
Rated Low by Zero Day Initiative
Data as of 26 May 2026, 20:33 UTC
What to do
AI-suggested
The vendor has not issued a patch or official fix, stating the vulnerability does not meet the servicing criteria. Therefore, no official remediation is available. The primary mitigation is to restrict user interaction with untrusted or suspicious folders containing library-ms files. Users and administrators should avoid opening folders from untrusted sources that might contain crafted library-ms files to prevent exploitation.
Description
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must view a folder containing malicious content. The ZDI has assigned a CVSS rating of 3.5.