Skip to content
OpenAdvisories
High MSRC-CVE-2022-21913 1 CVE

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

Published Jan 11, 2022 · Updated Jan 13, 2022 · Revision 2

Vendor: Microsoft

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Where can I find more information?
Please see KB5010265 adds AES encryption protections to the MS-LSAD protocol for CVE-2022-21913 for more information about how to protect yourself.

Security updates
10.0.17763.2452 — https://support.microsoft.com/help/5009557
10.0.18363.2037 — https://support.microsoft.com/help/5009545
10.0.19043.1466 — https://support.microsoft.com/help/5009543
10.0.20348.469 — https://support.microsoft.com/help/5009555
10.0.22000.434 — https://support.microsoft.com/help/5009566
10.0.10240.19177 — https://support.microsoft.com/help/5009585
10.0.14393.4886 — https://support.microsoft.com/help/5009546
6.1.7601.25829 — https://support.microsoft.com/help/5009610
6.1.7601.25829 — https://support.microsoft.com/help/5009621
6.3.9600.20246 — https://support.microsoft.com/help/5009624
6.3.9600.20246 — https://support.microsoft.com/help/5009595
6.0.6003.21349 — https://support.microsoft.com/help/5009627
6.0.6003.21349 — https://support.microsoft.com/help/5009601
6.2.9200.23584 — https://support.microsoft.com/help/5009586
6.2.9200.23584 — https://support.microsoft.com/help/5009619

Vulnerabilities 1

Revision history

  1. #2

    Added an FAQ. This is an information change only.

  2. #1

    Information published.

References