A critical zero-day vulnerability has been discovered in all versions of Windows, allowing for the potential theft of authentication credentials without user interaction. This security flaw, identified as CVE-2024-38193, can be exploited simply by viewing a malicious file in File Explorer. A third-party patch has been released by #0patch to address this issue, which has already been exploited in the wild. The vulnerability is particularly concerning due to its ability to hijack NTLM hashes, posing significant risks to user security and system integrity.