Microsoft update

KB5051972

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1
Windows Server 2008 for 32-bit Systems Service Pack 2 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1
Windows Server 2008 for x64-based Systems Service Pack 2 1
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1
Windows Server 2012 1
Windows Server 2012 (Server Core installation) 1
Windows Server 2012 R2 1
Windows Server 2012 R2 (Server Core installation) 1

TI-2025-15344 CVE-2025-21377 · GHSA-mhwv-rjc9-g3g8

MEDIUM 56

NTLM Hash Disclosure Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.39926 Published 2025-02-11 Fixed in 10.0.10240.20915, 10.0.14393.7785 +12 CWE-73