Skip to content
OpenAdvisories
Critical MSRC-CVE-2022-26937 1 CVE

Windows Network File System Remote Code Execution Vulnerability

Published May 10, 2022 · Updated May 10, 2022

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
This vulnerability could be exploited over the network by making an unauthenticated, specially crafted call to a Network File System (NFS) service to trigger a Remote Code Execution (RCE).

Security updates
10.0.17763.2928 — https://support.microsoft.com/help/5013941
10.0.20348.707 — https://support.microsoft.com/help/5013944
10.0.19042.1706 — https://support.microsoft.com/help/5013942
10.0.14393.5125 — https://support.microsoft.com/help/5013952
6.0.6003.21481 — https://support.microsoft.com/help/5014010
6.0.6003.21481 — https://support.microsoft.com/help/5014006
6.1.7601.25954 — https://support.microsoft.com/help/5014012
6.1.7601.25954 — https://support.microsoft.com/help/5013999
6.2.9200.23714 — https://support.microsoft.com/help/5014017
6.2.9200.23714 — https://support.microsoft.com/help/5014018
6.3.9600.20371 — https://support.microsoft.com/help/5014011
6.3.9600.20365 — https://support.microsoft.com/help/5014001

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References