CVE-2022-26829

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

Windows DNS Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
Microsoft	Windows Server 2019	>= 10.0.17763.0, < 10.0.17763.2803
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.17763.0, < 10.0.17763.2803
Microsoft	Windows Server 2022	>= 10.0.20348.0, < 10.0.20348.643
Microsoft	Windows Server version 20H2	>= 10.0.0, < 10.0.19042.1645
Microsoft	Windows Server 2016	>= 10.0.14393.0, < 10.0.14393.5066
Microsoft	Windows Server 2016 (Server Core installation)	>= 10.0.14393.0, < 10.0.14393.5066
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.21446
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	>= 6.0.6003.0, < 6.0.6003.21446
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.21446
Microsoft	Windows Server 2008 R2 Service Pack 1	>= 6.1.7601.0, < 6.1.7601.25924
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	>= 6.1.7601.0, < 6.1.7601.25924
Microsoft	Windows Server 2012	>= 6.2.9200.0, < 6.2.9200.23679
Microsoft	Windows Server 2012 (Server Core installation)	>= 6.2.9200.0, < 6.2.9200.23679
Microsoft	Windows Server 2012 R2	>= 6.3.9600.0, < 6.3.9600.20337
Microsoft	Windows Server 2012 R2 (Server Core installation)	>= 6.3.9600.0, < 6.3.9600.20337

References

Timeline

Published: Apr 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-26835.4A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown p CVE-2022-268307.5DiskUsage.exe Remote Code Execution Vulnerability CVE-2022-268317.5Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability CVE-2022-268327.5.NET Framework Denial of Service Vulnerability CVE-2022-268339.4An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specia CVE-2022-268347.5Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information CVE-2022-268354.9On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior CVE-2022-268369.8Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Ca CVE-2022-268377.0Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of CVE-2022-268386.5Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause CVE-2022-268397.8Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie applicati CVE-2022-26845.4A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability a