logo

New Windows Themes zero-day gets free, unofficial patches

ID: a8ea2c7a-edf7-5357-80e3-2aeab794bb2c

STIX ID: report--a8ea2c7a-edf7-5357-80e3-2aeab794bb2c

Feed Name: Bleeping Computer

Threat Score
72/100

Date Published: 2024-10-29

Date Updated: 2026-04-20

Author: Sergiu Gatlan

...
...

ACROS Security discovered a Windows Themes zero-day that can leak NTLM credentials remotely when a malicious theme file is merely viewed, affecting fully updated Windows versions from Windows 7 to Windows 11; ACROS/0patch has released free micropatches to mitigate the issue until Microsoft provides an official fix.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.