Skip to content
ThreatCluster

Critical Vulnerabilities in Internet Shortcut and NTLM Expose Networks to Attacks

First seen 20 Jul 2026, 17:39 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 21, 2026 at 16:29 UTC
  • •CVE-2025-33053 allows code execution via Internet Shortcut Files.
  • •CVE-2025-24054 enables spoofing through Windows NTLM vulnerabilities.
  • •CISA has issued advisories urging immediate action on these vulnerabilities.

Two critical vulnerabilities have been identified: CVE-2025-33053 in Internet Shortcut Files and CVE-2025-24054 in Windows NTLM. Both vulnerabilities allow unauthorized attackers to execute code or perform spoofing over a network. The vulnerabilities are linked to external control of file names or paths, making them particularly dangerous. Organizations using affected systems are at risk of exploitation, which could lead to significant data breaches or unauthorized access. CISA has referenced these vulnerabilities in its BOD 22-01 advisory, urging immediate attention. No specific patches or remediation steps were detailed in the articles. The vulnerabilities affect a wide range of software that utilizes these file types. Security teams are advised to consult the Known Exploited Vulnerabilities Catalog for further guidance.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 63d ago How this analysis works

Timeline

2026-07-20
CVE-2025-33053 published
A vulnerability in Internet Shortcut Files allows unauthorized code execution over a network.
nvd.nist.gov
2026-07-20
CVE-2025-24054 published
A vulnerability in Windows NTLM enables unauthorized spoofing over a network.
nvd.nist.gov
2026-07-20
CISA BOD 22-01 referenced
CISA's advisory highlights the need for immediate action on these vulnerabilities.
nvd.nist.gov

More articles in this cluster (2)

Extracted Entities (4)

1 / 3