CVE-2022-26923

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Active Directory Domain Services Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
May 10, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Aug 18, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-269247.5YARP Denial of Service VulnerabilityCVE-2022-269255.9Windows LSA Spoofing VulnerabilityCVE-2022-269267.8Windows Address Book Remote Code Execution VulnerabilityCVE-2022-269278.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2022-269287.0Windows Photo Import API Elevation of Privilege VulnerabilityCVE-2022-269297.8.NET Framework Remote Code Execution VulnerabilityCVE-2022-26938.8A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unCVE-2022-269305.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2022-269317.5Windows Kerberos Elevation of Privilege VulnerabilityCVE-2022-269328.2Storage Spaces Direct Elevation of Privilege VulnerabilityCVE-2022-269335.5Windows NTFS Information Disclosure VulnerabilityCVE-2022-269346.5Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-26923: High severity, CVSS 8.8 | Vulnix