Known Exploited Vulnerabilities July 01, 2022 · CISA KEV Catalog

CVE-2022-26925: Microsoft Windows LSA Spoofing Vulnerability

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2022-26925Microsoft

Related

CVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026

CVE-2026-96951: Microsoft Windows Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 13, 2026

CVE-2026-65660: Microsoft Share Point Code Injection Vulnerability Known Exploited Vulnerabilities · Sep 25, 2026