Microsoft’s security channels have logged CVE-2026-20872 as an NTLM hash disclosure / spoofing vulnerability tied to File Explorer and preview/metadata handling — a class of bug that repeatedly enables low‑interaction credential leakage by coaxing Windows clients to authenticate to...
