NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2022-24491

CVSS 3.1: 9.8 critical
EPSS: 33%p98
Published: Apr 15, 2022 · Apr 15, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-24491 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Windows Network File System Remote Code Execution Vulnerability

Vendors: microsoft

Products: windows 10, windows 11, windows 8.1, windows rt 8.1, windows server 2012, windows server 2016, windows server 2019, windows server 2022

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (33.5%)

In the news

7 stories

Non

Kaspersky SecurelistAug 15, 12:00 UTC · Aug 15, 2022RansomwareCVE-2022-26809 CVE-2022-24491 CVE-2022-24497+15 · 1 read

60

Microsoft Patch Tuesday, April 2022 Edition

Krebs on SecurityApr 15, 00:00 UTC · Apr 15, 2022VulnerabilityExploitedCVE-2022-24521 CVE-2022-26809 CVE-2022-24491+23 · 1 read

60

Microsoft Issues Patches for 2 Windows Zero

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2022VulnerabilityExploitedCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+53 · 1 read

60

April Records First Patch Tuesday of 2022 to Top 100 CVEs

Infosecurity MagazineApr 13, 09:00 UTC · Apr 13, 2022VulnerabilityExploitedCVE-2022-24521 CVE-2022-26904 CVE-2022-24491+12

60

Microsoft Partch Tuesday for April 2022 fixed 10 critical vulnerabilities

Security AffairsApr 12, 22:44 UTC · Apr 12, 2022VulnerabilityExploitedCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+22

60

Microsoft Patch Tuesday includes most vulnerabilities since Sept. 2020

Cisco TalosApr 12, 20:17 UTC · Apr 12, 2022VulnerabilityCVE-2022-23257 CVE-2022-24537 CVE-2022-22008+44 · 1 read

60

Microsoft fixes actively exploited zero-day reported by the NSA (CVE-2022-24521)

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2022Exploit / PoCExploitedCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+24 · 1 read

60