Acros Security researchers have discovered a critical Windows zero-day vulnerability affecting versions 7 through 11 and Windows Server 2008 R2 onwards, allowing attackers to steal NTLM credentials.