Microsoft Patch Tuesday, May 2022 Edition
Summary: Microsoft released updates addressing at least 74 security problems in Windows and related software, including seven critical flaws and a zero-day vulnerability affecting all supported versions of Windows. The most urgent, CVE-2022-26925, is a publicly disclosed flaw in the Local Security Authority process that Microsoft says is actively being exploited in the wild and affects Windows 7 through 10 and Windows Server 2008 through 2022.
Why it matters: Rapid7's Greg Wiseman notes the flaw lets attackers force domain controllers to authenticate via NTLM, which combined with an NTLM relay attack can lead to remote code execution, and he advises patching Domain Controllers before other servers.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-36942CVE-2022-26925CVE-2022-26937
- Related
- 2022 0-day In-the-Wild Exploitation…so far Cyber Risks ·CVE-2022-26925: Microsoft Windows LSA Spoofing Vulnerability Known Exploited Vulnerabilities · Jul 01, 2022CVE-2021-36942: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021