CVE-2022-26925

MediumCVSS 5.9/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows LSA Spoofing Vulnerability

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
May 10, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Jul 1, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-269267.8Windows Address Book Remote Code Execution VulnerabilityCVE-2022-269278.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2022-269287.0Windows Photo Import API Elevation of Privilege VulnerabilityCVE-2022-269297.8.NET Framework Remote Code Execution VulnerabilityCVE-2022-26938.8A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unCVE-2022-269305.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2022-269317.5Windows Kerberos Elevation of Privilege VulnerabilityCVE-2022-269328.2Storage Spaces Direct Elevation of Privilege VulnerabilityCVE-2022-269335.5Windows NTFS Information Disclosure VulnerabilityCVE-2022-269346.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-269356.5Windows WLAN AutoConfig Service Information Disclosure VulnerabilityCVE-2022-269366.5Windows Server Service Information Disclosure Vulnerability
CVE-2022-26925: Medium severity, CVSS 5.9 | Vulnix