VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, May 2022 Edition

Krebs on SecurityMay 11, 2022 · 12:33 UTC (May 11, 2022)3 min read3 · 1 read

Read at krebsonsecurity.com

Analyze CVE-2022-26925 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-26925 CVE-2021-36942 CVE-2022-26937

Tags: cve-2022-26925 cve-2021-36942 cve-2022-26937 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-36942	Unauthenticated LSA Spoofing (PetitPotam NTLM Relay) in Microsoft Windows	7.5	66%	KEVRansomwarePoC	Aug 12, 2021 KEV Nov 3, 2021
CVE-2022-26925	Spoofing Flaw in Windows LSA (CVE-2022-26925) Exploited Against Domain Controllers	5.9	10%	KEV	May 10, 2022 KEV Jul 1, 2022
CVE-2022-26937	Windows Network File System Remote Code Execution Vulnerability	9.8	76%		May 10, 2022

From the original article

3 min read at krebsonsecurity.com

Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This month’s patch batch includes fixes for seven “critical” flaws, as well as a zero-day vulnerability that affects all supported versions of Windows.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.