Riskcovery

CVE-2022-26937

Windows Network File System Remote Code Execution Vulnerability

State
Published
Severity
9.8 Critical
Published
May 10, 2022
Updated
Jan 2, 2025
Reserved
Mar 11, 2022

Read the record on cve.org

Description

Windows Network File System Remote Code Execution Vulnerability

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Windows Server 2019Microsoft
  • 10.0.17763.0 to before 10.0.17763.2928Affected
Windows Server 2019 (Server Core installation)Microsoft
  • 10.0.17763.0 to before 10.0.17763.2928Affected
Windows Server 2022Microsoft
  • 10.0.20348.0 to before 10.0.20348.707Affected
Windows Server version 20H2Microsoft
  • 10.0.0 to before 10.0.19042.1706Affected
Windows Server 2016Microsoft
  • 10.0.14393.0 to before 10.0.14393.5125Affected
Windows Server 2016 (Server Core installation)Microsoft
  • 10.0.14393.0 to before 10.0.14393.5125Affected
Windows Server 2008 Service Pack 2Microsoft
  • 6.0.6003.0 to before 6.0.6003.21481Affected
Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft
  • 6.0.6003.0 to before 6.0.6003.21481Affected
Windows Server 2008 Service Pack 2Microsoft
  • 6.0.6003.0 to before 6.0.6003.21481Affected
Windows Server 2008 R2 Service Pack 1Microsoft
  • 6.1.7601.0 to before 6.1.7601.25954Affected
Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft
  • 6.1.7601.0 to before 6.1.7601.25954Affected
Windows Server 2012Microsoft
  • 6.2.9200.0 to before 6.2.9200.23714Affected
Windows Server 2012 (Server Core installation)Microsoft
  • 6.2.9200.0 to before 6.2.9200.23714Affected
Windows Server 2012 R2Microsoft
  • 6.3.9600.0 to before 6.3.9600.20371Affected
Windows Server 2012 R2 (Server Core installation)Microsoft
  • 6.3.9600.0 to before 6.3.9600.20371Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.