Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
https://thehackernews.com/2025/04/microsoft-credits-encrypthub-hacker.html
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24071