CVE-2022-26785
Published: 15 April 2022
Summary
CVE-2022-26785 is a medium-severity an unspecified weakness vulnerability in Microsoft Windows Server 2016. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 7.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Windows Hyper-V contains an information disclosure vulnerability affecting shared virtual hard disks. The flaw, tracked as CVE-2022-26785, allows unauthorized access to sensitive data within the virtualization layer of affected Windows systems and carries a CVSS 3.1 score of 6.5 reflecting network attack vector, low complexity, and low required privileges.
An authenticated attacker with low privileges can exploit the issue remotely without user interaction to read confidential information stored on shared virtual hard disks. The vulnerability does not impact integrity or availability but exposes high-value data that could include guest virtual machine contents or configuration details.
Microsoft has published remediation guidance for CVE-2022-26785 through its security update portal, directing administrators to apply the relevant patches for Hyper-V. The associated EPSS score has remained flat at 0.0778 with no material increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-31335
Vulnerability details
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.