Microsoft has recorded CVE-2025-59185 as an external control of file name or path vulnerability in Windows Core Shell that Microsoft classifies as a spoofing issue and that security trackers map into the broader family of NTLM hash‑disclosure and spoofing problems that have been actively...