Recurring Windows Flaw Could Expose User Credentials

Executive summary: Researchers at ACROS Security discovered a new Windows themes file-path vulnerability (related to CVE-2024-38030 and CVE-2024-21320) that enables an authentication coercion attack to exfiltrate NTLM authentication hashes when a user opens a weaponized theme file; exploitation requires NTLM to be enabled and the victim to render the file (e.g., opening a folder in icon view), and Microsoft has been notified and is expected to act.