{"cvss":0.0,"datePublished":"2022-05-10T00:00:00Z","dateUpdated":"2022-05-10T00:00:00Z","description":"Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.","dueDate":"2022-07-22T00:00:00Z","id":"CVE-2022-26925","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Windows","requiredAction":"Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].","severity":"CRITICAL","source":"vulncheck_kev","title":"Microsoft Windows LSA Spoofing Vulnerability","vendor":"Microsoft"}