CVE-2022-26824
Published: 15 April 2022
Summary
CVE-2022-26824 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2016. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 6.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-26824 is a remote code execution vulnerability affecting the Windows DNS Server component. It carries a CVSS 3.1 base score of 7.2 with network attack vector, low attack complexity, and high privileges required, enabling an attacker to achieve full confidentiality, integrity, and availability impact on the affected system.
An attacker with high privileges on the network can send specially crafted requests to a Windows DNS Server and execute arbitrary code, resulting in complete compromise of the server without user interaction.
Microsoft security advisories at the referenced MSRC update guide URLs describe the availability of patches to address the flaw and recommend applying the relevant updates to mitigate the risk. The associated EPSS score has remained flat at a peak of 0.1014 with no material rise observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-31374
Vulnerability details
Windows DNS Server Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.