CVE-2022-35770

Summary

CVE-2022-35770 is a Windows NTLM spoofing vulnerability that allows an attacker to manipulate NTLM authentication messages, potentially leading to unauthorized access to systems and services. By forging NTLM authentication responses, an attacker can trick a victim's system into granting access with higher privileges than the attacker actually has. This issue affects multiple Microsoft products and could be exploited via various attack vectors, including email phishing or malware campaigns. Organizations are encouraged to apply the available patches as soon as possible to mitigate the risk of successful attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.