CVE-2022-26925: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows LSA Spoofing Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].
A spoofing vulnerability in Windows Local Security Authority (LSA) allows an attacker to impersonate legitimate security credentials or processes. This could enable unauthorized access to sensitive data or system resources by tricking the system into trusting false security claims.
The vulnerability in Windows LSA (CWE-306: Missing Authentication) permits an attacker to forge or spoof authentication credentials without proper verification. An authenticated or local attacker can manipulate LSA validation mechanisms to impersonate privileged users or processes, potentially gaining elevated access or bypassing security policy enforcement.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.