CVE-2022-26925
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 3, 2026
3 articles
EPSS Score
Source: FIRST.org · 2026-05-24
37.43%
probability
This CVE has a 37.43% probability
of being exploited in the next 30 days.
0%
Top 97.2th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroWindows LSA Spoofing Vulnerability
Attack Intelligence
Google Project Zero
Patched
May 10, 2022
Reported by
Raphael John with Bertelsmann Printing Group
Root Cause Analysis
???
May 2022 Patch Tuesday | Microsoft Releases 75 Vulnerabilities With 8 Critical; Adobe Releases 5 Advisories, 18 Vulnerabilities With 16 Critical.
Qualys
May 10, 2022
Security Advisory 2022-034
CERT-EU
May 11, 2022
Microsoft fixes new NTLM relay zero-day in all Windows versions
BleepingComputer
May 10, 2022
Signal Intelligence
Confidence
78%
EPSS
37.43%
Mentions
3
Last Seen
May 11, 2022
CNA Information
Analyst Note
CVE-2022-26925 is confirmed as a legitimate Windows LSA spoofing vulnerability affecting Windows 10, with a high CVSS score of 8.1 and validation from Google Project Zero and CERT-EU. The vulnerability has documented evidence from an authoritative security advisory, though its absence from CISA KEV and limited article coverage (1 source) suggests it may be less actively exploited or remediated compared to other critical Windows issues.
Triage Info
Decided atMar 03, 2026