CVE-2023-29446
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.
MEDIUM · CVSS 4.7
EPSS 0.00071
Monitor
- No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence
Sigma rules0
YARA rules0