Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-22713 | Windows Hyper-V Denial of Service Vulnerability | 5.6 | <1% | ||
| CVE-2022-26923 | Authenticated Privilege Escalation in Microsoft Active Directory Domain Services | 8.8 | 84% | KEV | KEV |
| CVE-2022-26925 | Spoofing Flaw in Windows LSA (CVE-2022-26925) Exploited Against Domain Controllers | 5.9 | 10% | KEV | KEV |
| CVE-2022-26937 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | 76% | ||
| CVE-2022-29972 | An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through… | 7.8 | 4% |
From the original article
3 min read at helpnetsecurity.com
May 2022 Patch Tuesday is here, and Microsoft has marked it by releasing fixes for 74 CVE-numbered vulnerabilities, including one zero-day under active attack (CVE-2022-26925) and two publicly known vulnerabilities (CVE-2022-29972 and CVE-2022-22713).
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.