
A newly uncovered vulnerability in Windows Themes has the potential to expose NTLM credentials to attackers, putting numerous Windows users at risk. Despite Microsoft issuing a patch for the CVE-2024-38030 vulnerability, which aimed to address the Windows Themes spoofing issue initially reported by Tomer Peled of Akamai, the flaw remains largely unmitigated across several Windows platforms. Further research conducted by