CVE-2022-26809

—

CVSS 3.1

9.8 critical

EPSS

91%p100

Published

Apr 15, 2022 (Apr 15, 2022)

Modified

Jun 17, 2026

Description

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10, windows 11, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (91.0%)

In the news11 stories

Threat Brief: Microsoft Critical Vulnerabilities (CVE-2022-26809, CVE-2022-26923, CVE-2022

Palo Alto Unit 42Jun 5, 20:13 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-26809 CVE-2022-26923 CVE-2022-269251

60

Non

Kaspersky SecurelistAug 15, 12:00 UTC · Aug 15, 2022Ransomware CVE-2022-26809 CVE-2022-24491 CVE-2022-24497+1 CVEs

60

Threat actors target the infoSec community with fake PoC exploits

Security AffairsMay 23, 18:21 UTC · May 23, 2022Exploit / PoC CVE-2022-26809 CVE-2022-24500

60

Microsoft Releases Fix for New Zero

The Hacker NewsMay 11, 16:06 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+14 CVEs

60

Experts warn of concerns around Microsoft RPC bug

The RecordApr 21, 00:00 UTC · Apr 21, 2022Ransomware CVE-2022-268091

60

Week in review: Attackers exploiting VMware RCE, Microsoft fixes actively exploited zero-day

Help Net SecurityApr 17, 00:00 UTC · Apr 17, 2022Exploit / PoC in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+1 CVEs

60

Critical Microsoft RPC runtime bug: No PoC exploit yet, but patch ASAP! (CVE-2022-26809)

Help Net SecurityApr 15, 00:00 UTC · Apr 15, 2022Exploit / PoC CVE-2022-268091

60

Microsoft Patch Tuesday, April 2022 Edition

Krebs on SecurityApr 15, 00:00 UTC · Apr 15, 2022Vulnerability in the wildCVE-2022-24521 CVE-2022-26809 CVE-2022-24491+2 CVEs

60

Microsoft Issues Patches for 2 Windows Zero

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2022Vulnerability in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+5 CVEs1

60

Microsoft Partch Tuesday for April 2022 fixed 10 critical vulnerabilities

Security AffairsApr 12, 22:44 UTC · Apr 12, 2022Vulnerability in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+2 CVEs

60

Microsoft fixes actively exploited zero-day reported by the NSA (CVE-2022-24521)

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2022Exploit / PoC in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+2 CVEs

60