CVE-2022-26925 Microsoft Windows
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows LSA Spoofing Vulnerability
- Added
- 2022-07-01
- Federal patch deadline
- 2022-07-22
- Ransomware use
- not known