CVE-2022-26925

Vulnerability details

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.

Added to CISA KEV: 2022-07-01

Ransomware campaign use: Unknown

CISA due date: 2022-07-22

Defensive guidance from CISA

Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.