CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows LSA Spoofing and NTLM Relay Vulnerability (CVE-2022-26925) Security Advisory
[Affected Scope] Windows and Windows Server operating systems, specifically Active Directory Domain Controllers
[Impact] Unauthenticated remote attackers can call methods on the LSARPC interface to coerce the Domain Controller to authenticate to an arbitrary target via NTLM, leading to full domain takeover
[Mitigation] Apply the official Microsoft cumulative security updates immediately, and enforce Extended Protection for Authentication (EPA) along with SMB signing to block NTLM relay paths
Windows LSA Spoofing Vulnerability (CVE-2021-36942, PetitPotam) Technical Analysis and Mitigation Guide
[Affected Scope] Windows and Windows Server operating systems, particularly Active Directory Domain Controllers
[Impact] Unauthenticated remote attackers can exploit the LSARPC interface to force a Domain Controller to authenticate against an arbitrary server via NTLM, leading to full domain takeover
[Mitigation] Apply the official Microsoft security updates immediately, and configure Extended Protection for Authentication (EPA) alongside SMB signing to block NTLM relay vectors