CVE-2022-26925

🗓️ 10 May 2022 21:15:10Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 24 Views

Windows LSA Spoofing Vulnerability CVE-2022-26925

Reporter	Title	Published	Views	Family All 66
ATTACKERKB	CVE-2022-26925	10 May 202200:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday May 2022: Edge RCE, PetitPotam LSA Spoofing, bad patches	26 May 202221:21	–	avleonov
BDU FSTEC	The vulnerability of the LSARPC interface method in the Windows LSA component of the Windows operating system allows a attacker to execute a “man-in-the-middle” attack.	13 May 202200:00	–	bdu_fstec
Circl	CVE-2022-26925	11 May 202204:00	–	circl
CISA KEV Catalog	Microsoft Windows LSA Spoofing Vulnerability	1 Jul 202200:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	1 Jul 202200:00	–	cisa
CISA	CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog	13 May 202200:00	–	cisa
CNNVD	Microsoft Local Security Authority Server 访问控制错误漏洞	10 May 202200:00	–	cnnvd
Check Point Advisories	Microsoft Active Directory Certificate Services NTLM Relay (CVE-2021-36942; CVE-2022-26925)	27 Jul 202100:00	–	checkpoint_advisories
CVE	CVE-2022-26925	10 May 202220:33	–	cve

NVD

Node

microsoft windows_10_1507Range<10.0.10240.19297

OR

microsoft windows_10_1607Range<10.0.14393.5125

OR

microsoft windows_10_1809Range<10.0.17763.2928

OR

microsoft windows_10_1909Range<10.0.18363.2274

OR

microsoft windows_10_20h2Range<10.0.19042.1706

OR

microsoft windows_10_21h1Range<10.0.19043.1706

OR

microsoft windows_10_21h2Range<10.0.19044.1706

OR

microsoft windows_11_21h2Range<10.0.22000.675

OR

microsoft windows_7Match-sp1

OR

microsoft windows_8.1Match-

OR

microsoft windows_rt_8.1Match-

OR

microsoft windows_server_2008Match-sp2

OR

microsoft windows_server_2008Matchr2sp1x64

OR

microsoft windows_server_2012Match-

OR

microsoft windows_server_2012Matchr2

OR

microsoft windows_server_2016Range<10.0.14393.5125

OR

microsoft windows_server_2019Range<10.0.17763.2928

OR

microsoft windows_server_2022Range<10.0.20348.707

OR

microsoft windows_server_20h2Range<10.0.19042.1706

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26925
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26925

30 Oct 2025 19:23Current

CVSS 24.3

CVSS 3.15.9 - 8.1

EPSS0.09823

windows lsa spoofing vulnerability cve-2022-26925