Record · corpus.blog/posts/01a08788-95a7-7029-88cb-9ffb7ffcc33f

CVE-2025-59201 - Network Connection Status Indicator (NCSI) EoP

itm4n.github.io · published 23 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at itm4n.github.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 28
Words captured: 2,976

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59201

msrc.microsoft.com

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/msrc-vuln-summary.png

itm4n.github.io

https://x.com/t0zhang

x.com

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/msrc-vuln-faq-ack.png

itm4n.github.io

https://www.tiraniddo.dev/2020/04/sharing-logon-session-little-too-much.html

tiraniddo.dev

https://learn.microsoft.com/en-us/windows-server/networking/ncsi/ncsi-overview

learn.microsoft.com

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/microsoft-ncsi-icons.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/microsoft-ncsi-service-note.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/system-informer-netprofm-modules-ncsi.png

itm4n.github.io

https://support.microsoft.com/en-us/topic/october-14-2025-kb5066835-os-builds-26200-6899-and-26100-6899-1db237d8-9f3b-4218-9515-3e0a32729685

support.microsoft.com

https://winbindex.m417z.com/

winbindex.m417z.com

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/winbindex-ncsi.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/bindiff-patched-function.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/bindiff-unmatched-functions.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/procmon-regsetvalue.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/procmon-stack-regsetvalue.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/registry-manualproxies-default-value.png

itm4n.github.io

https://learn.microsoft.com/en-us/windows/win32/intl/using-registry-string-redirection

learn.microsoft.com

Creating Registry Links Read at the source ↗

scorpiosoftware.net

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/registry-setvalue-permission.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/registry-parameters-dacl-comparison.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/procmon-stack-etwlistener.png

itm4n.github.io

https://github.com/zodiacon/EtwExplorer

github.com

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/etwexplorer-wininet-provider.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/etwexplorer-wininet-event.png

itm4n.github.io

https://learn.microsoft.com/en-us/windows/win32/etw/writing-manifest-based-events

learn.microsoft.com

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/poc-eventwrite-trigger.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2026-02-24-cve-2025-59201-ncsi-eop/procmon-registry-sqmclient-paths-delete.png

itm4n.github.io