NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability4 · 1 read

CVE-2022-26937

CVSS 3.1: 9.8 critical
EPSS: 76%p99
Published: May 10, 2022 · May 10, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-26937 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Windows Network File System Remote Code Execution Vulnerability

Vendors: microsoft

Products: windows server, windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (76.0%)

In the news

7 stories

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023VulnerabilityExploitedCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+105 · 1 read

60

Watch out for the CVE-2022

Security AffairsJul 18, 10:43 UTC · Jul 18, 2022VulnerabilityCVE-2022-30136 CVE-2022-269372 · 1 read

60

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Help Net SecurityMay 12, 08:27 UTC · May 12, 2022Exploit / PoCExploitedCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+23

60

Microsoft Releases Fix for New Zero

The Hacker NewsMay 11, 16:06 UTC · May 11, 2022Exploit / PoCExploitedCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+142 · 1 read

60

Microsoft Patch Tuesday, May 2022 Edition

Krebs on SecurityMay 11, 12:33 UTC · May 11, 2022VulnerabilityExploitedCVE-2022-26925 CVE-2021-36942 CVE-2022-269373 · 1 read

60

Microsoft Patch Tuesday updates for May 2022 fixes 3 zero

Security AffairsMay 11, 06:11 UTC · May 11, 2022VulnerabilityExploitedCVE-2022-26925 CVE-2022-22713 CVE-2022-29972+15

60

Microsoft Patch Tuesday for May 2022 — Snort rules and prominent vulnerabilities

Cisco TalosMay 10, 19:31 UTC · May 10, 2022VulnerabilityCVE-2022-21972 CVE-2022-23270 CVE-2022-26931+94 · 1 read

60