CVE-2022-26925 1

CVE-2022-26925: Microsoft Windows LSA Spoofing Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 01, 2022

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.

Vulnerabilities & Patching