Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Huntress disclosed an unpatched flaw in the Windows "search:" URI handler that leaks a user's NTLMv2 hash, using "search:" and "crumb=location:" parameters in place of the "filePath" parameter that drove CVE-2026-33829 in the Snipping Tool, which Microsoft...