CVE-2022-26937

—1

CVSS 3.1

9.8 critical

EPSS

76%p99

Published

May 10, 2022 (May 10, 2022)

Modified

Jun 17, 2026

Description

Windows Network File System Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows server, windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (76.0%)

In the news7 stories

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+10 CVEs1

60

Watch out for the CVE-2022

Security AffairsJul 18, 10:43 UTC · Jul 18, 2022Vulnerability CVE-2022-30136 CVE-2022-26937

60

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Help Net SecurityMay 12, 08:27 UTC · May 12, 2022Exploit / PoC in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+2 CVEs1

60

Microsoft Releases Fix for New Zero

The Hacker NewsMay 11, 16:06 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+14 CVEs

60

Microsoft Patch Tuesday, May 2022 Edition

Krebs on SecurityMay 11, 12:33 UTC · May 11, 2022Vulnerability in the wildCVE-2022-26925 CVE-2021-36942 CVE-2022-26937

60

Microsoft Patch Tuesday updates for May 2022 fixes 3 zero

Security AffairsMay 11, 06:11 UTC · May 11, 2022Vulnerability in the wildCVE-2022-26925 CVE-2022-22713 CVE-2022-29972+1 CVEs

60

Microsoft Patch Tuesday for May 2022 — Snort rules and prominent vulnerabilities

Cisco TalosMay 10, 19:31 UTC · May 10, 2022Vulnerability CVE-2022-21972 CVE-2022-23270 CVE-2022-26931+9 CVEs1

60