What is cve-2022-26809?

CVE-2022-26809 is a critical remote code execution vulnerability affecting the Remote Procedure Call (RPC) runtime in various Windows operating systems, including Windows 7, Windows 8.1, Windows 10, Windows 11, and multiple Windows Server versions. This vulnerability poses a significant risk to the security of affected systems, making it crucial for users and administrators to apply necessary security updates to protect their systems from potential exploitation.

Who is impacted by this?

CVE-2022-26809 affects users of Microsoft Windows operating systems, including Windows 7, Windows 8.1, Windows 10, Windows 11, and Windows Server versions such as 2008, 2012, 2016, 2019, and 2022. This critical remote code execution vulnerability poses a significant security risk, making it essential for users and administrators to be aware of the potential threat.

What to do if cve-2022-26809 affected you

If you're affected by the CVE-2022-26809 vulnerability, it's crucial to take action to protect your system. Here's a simple guide to help you:

1. Apply the April 2022 security updates provided by Microsoft.

2. Secure SMB traffic by following Microsoft's guidelines.

3. Block TCP port 135 at your enterprise perimeter firewall to reduce the likelihood of potential attacks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-26809 vulnerability, also known as the Remote Procedure Call Runtime Remote Code Execution Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was added to the National Vulnerability Database on April 15, 2022. To address this issue, users should apply the April 2022 security updates and follow Microsoft's guidelines to secure SMB traffic.

Weakness Enumeration

The weakness enumeration for this vulnerability is "Insufficient Information," indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For a comprehensive understanding of the vulnerability, its severity, technical details, and affected software configurations, refer to the NVD page and the sources listed below.

• Microsoft Security Update Guide

• CVE Record

• Cybersecurity @ NIST