CVE-2022-26939

Summary

CVE-2022-26939 is an elevation of privilege vulnerability affecting Microsoft Storage Spaces Direct. Successful exploitation allows an attacker to gain elevated permissions, enabling them to perform unauthorized actions within the affected system. This can result in data theft, unauthorized data modification, or even system takeover. The vulnerability is due to an improper access control issue in the Storage Spaces Direct software. Microsoft has released a patch to address this vulnerability, and it is strongly recommended that affected systems be updated as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.