Outlook vulnerability that can be used to extract NTLMv2 hashes by exploiting Outlook, Windows Performance Analyzer (WPA), and Windows File Explorer has been identified.

#CoSoSec #Outlook #Microsoft

Flaw Let Attackers Access Hashed Passwords

Microsoft has completely patched this vulnerability in December 2023. However, unpatched systems are still vulnerable to exploitation and stealing of hashed passwords.

https://gbhackers.com/outlook-flaw-hashed-passwords