What is CVE-2022-26939?

CVE-2022-26939 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Storage Spaces Direct Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2022-26939 cover?

CVE-2022-26939 covers the following CVE IDs: CVE-2022-26939. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2022-26939?

CVE-2022-26939 has a CVSS v3 base score of 7.0, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2022-26939?

CVE-2022-26939 affects 7 products, including: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server 2022; and others — see the full list on the advisory page.

CVE-2022-26939HighCVSS 7.0

Storage Spaces Direct Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

May 10, 2022

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2022-26939 →

📋 Description

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition.

🎯 Affected products7

Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server, version 20H2 (Server Core Installation)

✅ Remediation

KB5013941 (Security Update) — fixed build 10.0.17763.2928 KB5013944 (Security Update) — fixed build 10.0.20348.707 KB5013942 (Security Update) — fixed build 10.0.19042.1706 KB5013952 (Security Update) — fixed build 10.0.14393.5125

🔗 References (9)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26939
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5013941
referencehttps://support.microsoft.com/help/5013941
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5013944
referencehttps://support.microsoft.com/help/5013944
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5013942
referencehttps://support.microsoft.com/help/5013942
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5013952
referencehttps://support.microsoft.com/help/5013952