Lucene search
HistoryMay 10, 2022 - 9:15 p.m.
CVE-2022-26925
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
0.897 High
EPSS
Percentile
98.8%
Windows LSA Spoofing Vulnerability
Affected configurations
Node
microsoftwindows_10Match-x64
ORmicrosoftwindows_10Match-x86
ORmicrosoftwindows_10Match20h2arm64
ORmicrosoftwindows_10Match20h2x64
ORmicrosoftwindows_10Match20h2x86
ORmicrosoftwindows_10Match21h1arm64
ORmicrosoftwindows_10Match21h1x64
ORmicrosoftwindows_10Match21h1x86
ORmicrosoftwindows_10Match21h2arm64
ORmicrosoftwindows_10Match21h2x64
ORmicrosoftwindows_10Match21h2x86
ORmicrosoftwindows_10Match1607x64
ORmicrosoftwindows_10Match1607x86
ORmicrosoftwindows_10Match1809arm64
ORmicrosoftwindows_10Match1809x64
ORmicrosoftwindows_10Match1809x86
ORmicrosoftwindows_10Match1909arm64
ORmicrosoftwindows_10Match1909x64
ORmicrosoftwindows_10Match1909x86
ORmicrosoftwindows_11Match-arm64
ORmicrosoftwindows_11Match-x64
ORmicrosoftwindows_7Match-sp1x64
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_8.1Match-x64
ORmicrosoftwindows_8.1Match-x86
ORmicrosoftwindows_rt_8.1Match-
ORmicrosoftwindows_serverMatch2022
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2008Matchr2sp1x86
ORmicrosoftwindows_server_2008Matchsp2x64
ORmicrosoftwindows_server_2008Matchsp2x86
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
Related
mscve
mscve
Windows LSA Spoofing Vulnerability
2022-05-10 08:00:00
prion
prion
Spoofing
2022-05-10 21:15:00
cvelist
cvelist
CVE-2022-26925 Windows LSA Spoofing Vulnerability
2022-05-10 20:33:41
attackerkb
attackerkb
CVE-2022-26925
2022-05-10 00:00:00
cve
cve
CVE-2022-26925
2022-05-10 21:15:10
cisa_kev
cisa_kev
Microsoft Windows LSA Spoofing Vulnerability
2022-07-01 00:00:00
cisa
cisa
CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog
2022-05-13 00:00:00
CISA Adds One Known Exploited Vulnerability to Catalog
2022-07-01 00:00:00
checkpoint_advisories
checkpoint_advisories
trellix
trellix
The Bug Report – May 2022 Edition
2022-06-01 00:00:00
The Bug Report – May 2022 Edition
2022-06-01 00:00:00
hivepro
hivepro
Three zero-days addressed in Microsoft’s May 2022 Patch Tuesday
2022-05-13 02:16:37
Weekly Threat Digest: 9-15 May 2022
2022-05-19 03:20:31
securelist
securelist
IT threat evolution Q2 2022
2022-08-15 12:00:34
IT threat evolution in Q2 2022. Non-mobile statistics
2022-08-15 12:00:43
krebs
krebs
Microsoft Patch Tuesday, May 2022 Edition
2022-05-11 02:34:59
malwarebytes
malwarebytes
threatpost
threatpost
Actively Exploited Zero-Day Bug Patched by Microsoft
2022-05-11 11:12:11
avleonov
avleonov
qualysblog
qualysblog
thn
thn
Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates
2022-05-11 05:29:00
googleprojectzero
googleprojectzero
2022 0-day In-the-Wild Exploitation…so far
2022-06-30 00:00:00
mskb
mskb
May 10, 2022—KB5014010 (Monthly Rollup)
2022-05-12 07:00:00
May 10, 2022—KB5014006 (Security-only update)
2022-05-12 07:00:00
May 10, 2022—KB5013999 (Security-only update)
2022-05-12 07:00:00
nessus
nessus
KB5014006: Windows Server 2008 Security Update (May 2022)
2022-05-10 00:00:00
KB5013999: Windows 7 and Windows Server 2008 R2 Security Update (May 2022)
2022-05-10 00:00:00
KB5013963: Windows 10 LTS 1507 Security Update (May 2022)
2022-05-10 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5014012)
2022-05-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5013963)
2022-05-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5013945)
2022-05-11 00:00:00
kaspersky
kaspersky
KLA12524 Multiple vulnerabilities in Microsoft Products (ESU)
2022-05-10 00:00:00
KLA12526 Multiple vulnerabilities in Microsoft Windows
2022-05-10 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - May 2022
2022-05-10 19:59:20
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
0.897 High
EPSS
Percentile
98.8%
Related for NVD:CVE-2022-26925