CVE-2022-26820

EUVD-2022-31370
Windows DNS Server Remote Code Execution Vulnerability
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.6 MEDIUM
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
6.6 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_server_2008
-
microsoftwindows_server_2012
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
microsoftwindows_server_2022
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows Server
20H2 Server Core
KB5012599
Windows Server 2008
Service Pack 2 (x64, x86)
KB5012658
Service Pack 2 Server Core (x64, x86)
KB5012658
Windows Server 2008 R2
Service Pack 1 (x64)
KB5012649
Service Pack 1 Server Core (x64)
KB5012649
Windows Server 2012
Server Core
KB5012666
Standard
KB5012666
Windows Server 2012 R2
Server Core
KB5012670
Standard
KB5012670
Windows Server 2016
Server Core
KB5012596
Standard
KB5012596
Windows Server 2019
Server Core
KB5012647
Standard
KB5012647
Windows Server 2022
Server Core
KB5012604
Standard
KB5012604
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26820
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26820