Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2022-26925

🗓️ 10 May 2022 20:33:41Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 1321 Views

Windows LSA Spoofing Vulnerability CVE-2022-2692

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
attackerkb
attackerkb		CVE-2022-26925
10 May 202200:00
–attackerkb
avleonov
Information Security Automation		Microsoft Patch Tuesday May 2022: Edge RCE, PetitPotam LSA Spoofing, bad patches
26 May 202221:21
–avleonov
bdu_fstec
BDU FSTEC		Windows LSA LSARPC Man-in-the-Middle
13 May 202200:00
–bdu_fstec
circl
Circl		CVE-2022-26925
11 May 202204:00
–circl
cisa_kev
CISA KEV Catalog		Microsoft Windows LSA Spoofing Vulnerability
1 Jul 202200:00
–cisa_kev
cisa
CISA		CISA Adds One Known Exploited Vulnerability to Catalog
1 Jul 202200:00
–cisa
cisa
CISA		CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog
13 May 202200:00
–cisa
cnnvd
CNNVD		Microsoft Local Security Authority Server 访问控制错误漏洞
10 May 202200:00
–cnnvd
checkpoint_advisories
Check Point Advisories		Microsoft Active Directory Certificate Services NTLM Relay (CVE-2021-36942; CVE-2022-26925)
27 Jul 202100:00
–checkpoint_advisories
cvelist
Cvelist		CVE-2022-26925 Windows LSA Spoofing Vulnerability
10 May 202220:33
–cvelist
Rows per page
NVD
Vulners
CNA
Node
OR
microsoftwindows_10_1507Range<10.0.10240.19297
microsoftwindows_10_1607Range<10.0.14393.5125
microsoftwindows_10_1809Range<10.0.17763.2928
microsoftwindows_10_1909Range<10.0.18363.2274
microsoftwindows_10_20h2Range<10.0.19042.1706
microsoftwindows_10_21h1Range<10.0.19043.1706
microsoftwindows_10_21h2Range<10.0.19044.1706
microsoftwindows_11_21h2Range<10.0.22000.675
microsoftwindows_7Match-sp1
microsoftwindows_8.1Match-
microsoftwindows_rt_8.1Match-
microsoftwindows_server_2008Match-sp2
microsoftwindows_server_2008Matchr2sp1x64
microsoftwindows_server_2012Match-
microsoftwindows_server_2012Matchr2
microsoftwindows_server_2016Range<10.0.14393.5125
microsoftwindows_server_2019Range<10.0.17763.2928
microsoftwindows_server_2022Range<10.0.20348.707
microsoftwindows_server_20h2Range<10.0.19042.1706
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.2928",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.17763.2928",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.2928",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.2928",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1909",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems",
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.18363.2274",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H1",
    "platforms": [
      "x64-based Systems",
      "ARM64-based Systems",
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.19043.1706",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.707",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 20H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.19042.1706",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server version 20H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.19042.1706",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 21H2",
    "platforms": [
      "x64-based Systems",
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.22000.675",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19043.0",
        "lessThan": "10.0.19043.1706",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1507",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.10240.0",
        "lessThan": "10.0.10240.19297",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.5125",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.5125",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.5125",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 7",
    "platforms": [
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "6.1.0",
        "lessThan": "6.1.7601.25954",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 7 Service Pack 1",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.0",
        "lessThan": "6.1.7601.25954",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 8.1",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems",
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.0",
        "lessThan": "6.3.9600.20371",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2",
    "platforms": [
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.21481",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.21481",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008  Service Pack 2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.21481",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.7601.0",
        "lessThan": "6.1.7601.25954",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.7601.0",
        "lessThan": "6.1.7601.25954",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.23714",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.23714",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.20371",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.20371",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

foxbook

「マイクロソフトは、アクティブな攻撃の下でゼロデイを偽装するWindows LSAにパッチを適用します（CVE-2022-26925）」

cyberreport_io

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925) - Help Net Security https://t.co/0zQmYrhaDE #cybersecurity #threatintelligence #cybernews

susession

Trending News: /ryanaraine: '"An unauthenticated attacker could call a method on the LSARPC interface and coerce the domain controller to authenticate to the attacker using NTLM..." Fresh Windows 0day (CVE-2022-26925) ' , see more https://t.co/QZxrd4cQwR

foxbook

何よりもまず、CVE-2022-26925があります。これは、Windows Local Security Authority（LSA）の「重要な」なりすましの脆弱性であり、NTLMリレー攻撃と組み合わせると「重大な」ものになる可能性があります

passingthehash

ok, so if CVE-2022-26925 is the same as the regular petitpotam vulnerability, WTAF is going on over at Microsoft and their QA patch testing

www_sesin_at

New post from https://t.co/9KYxtdZjkl (CVE-2022-26925) has been published on https://t.co/4AMSgx2lJ1

WolfgangSesin

New post from https://t.co/uXvPWJy6tj (CVE-2022-26925) has been published on https://t.co/bEzd24vpmB

chartartScanner

CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog. This issue only affects May 10, 2022 updates installed on servers used... #CISA https://t.co/LNo85q2ui8

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 04:36Current
7.5High risk
Vulners AI Score7.5
CVSS 24.3
CVSS 3.15.9 - 8.1
EPSS0.10476
SSVC
CWE-306In Wild
windowslsaspoofingvulnerabilitycve-2022-26925nvd
1321