CVE-2022-24491

—

CVSS 3.1

9.8 critical

EPSS

33%p98

Published

Apr 15, 2022 (Apr 15, 2022)

Modified

Jun 17, 2026

Description

Windows Network File System Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10, windows 11, windows 8.1, windows rt 8.1, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (33.5%)

In the news7 stories

Non

Kaspersky SecurelistAug 15, 12:00 UTC · Aug 15, 2022Ransomware CVE-2022-26809 CVE-2022-24491 CVE-2022-24497+1 CVEs

60

Microsoft Patch Tuesday, April 2022 Edition

Krebs on SecurityApr 15, 00:00 UTC · Apr 15, 2022Vulnerability in the wildCVE-2022-24521 CVE-2022-26809 CVE-2022-24491+2 CVEs

60

Microsoft Issues Patches for 2 Windows Zero

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2022Vulnerability in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+5 CVEs1

60

April Records First Patch Tuesday of 2022 to Top 100 CVEs

Infosecurity MagazineApr 13, 09:00 UTC · Apr 13, 2022Vulnerability in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-24491+1 CVEs

60

Microsoft Partch Tuesday for April 2022 fixed 10 critical vulnerabilities

Security AffairsApr 12, 22:44 UTC · Apr 12, 2022Vulnerability in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+2 CVEs

60

Microsoft Patch Tuesday includes most vulnerabilities since Sept. 2020

Cisco TalosApr 12, 20:17 UTC · Apr 12, 2022Vulnerability CVE-2022-23257 CVE-2022-24537 CVE-2022-22008+4 CVEs

60

Microsoft fixes actively exploited zero-day reported by the NSA (CVE-2022-24521)

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2022Exploit / PoC in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+2 CVEs

60