CVE-2019-1166

CVE-2019-1166 describes a tampering vulnerability in Microsoft Windows, affecting various versions including Windows 7, 8.1, 10, and multiple Windows Server editions. This flaw allows a man-in-the-middle attacker to bypass NTLM Message Integrity Check (MIC) protection. Rated as Medium severity (CVSS 5.9), it has a network attack vector and high attack complexity, potentially leading to high integrity impact without requiring user interaction. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, with articles highlighting its potential for domain compromise.