{"metadata": {"vulnerability": "cve-2022-26904", "count": 78, "kinds": {"milestone": 7, "sighting": 23, "kev": 11, "other": 37}}, "data": [{"timestamp": "2022-03-11T00:00:00Z", "date_only": false, "value": "2022-03-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-26904", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-28T11:00:54Z", "date_only": false, "value": "2022-03-28T11:00:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5692", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "390311e5-330b-43ec-8bfa-f417275195c0", "content": "#exploit\n1. CVE-2022-26904:\nSuperProfile User Profile LPE\nhttps://github.com/rapid7/metasploit-framework/pull/16382\n\n2. CVE-2022-0778:\nOpenSSL - Illegal x.509 certificate construction\nhttps://github.com/drago-96/CVE-2022-0778", "url": "https://t.me/CyberSecurityTechnologies/5692"}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-04-11T20:28:05Z", "date_only": false, "value": "2022-04-11T20:28:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_26904_superprofile.rb", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "8ea47df5-361c-4e2f-9e95-85cc63c28b03", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_26904_superprofile.rb"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26904", "record": "MSRC_CVE-2022-26904", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26904", "record": "MSRC_CVE-2022-26904", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2022-26904", "field": "containers.cna.datePublic"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26904", "record": "MSRC_CVE-2022-26904", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26904", "record": "MSRC_CVE-2022-26904", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-335", "record": "CERTFR-2022-AVI-335", "field": "last_revision_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-335", "record": "CERTFR-2022-AVI-335", "field": "initial_release_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-335", "record": "CERTFR-2022-AVI-335", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-13T04:00:00Z", "date_only": false, "value": "2022-04-13T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=784", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "32434482-5aef-4f21-86dd-fc4fa52b50c8", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=784"}, {"timestamp": "2022-04-13T08:18:48Z", "date_only": false, "value": "2022-04-13T08:18:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/474", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "ccd032fe-7997-45b5-ba2f-5ef69de9fa9b", "content": "\u200b\u2705 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\ud83d\udcac \u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a, 12-\u0433\u043e \u0430\u043f\u0440\u0435\u043b\u044f, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows, \u0417\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0435, Office, Exchange Server, Visual Studio, \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u043f\u0440.\n\n\u0414\u0435\u0441\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. 115 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043e\u043f\u0430\u0441\u043d\u044b\u0435, \u0438 3 \u2014 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows Common Log File System, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 CrowdStrike. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-24521 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 7,8 \u0431\u0430\u043b\u043b\u0430 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10.\n\n\u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0440\u0430\u043d\u0435\u0435. CVE-2022-26904 (7.0 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows User Profile Service.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 Runtime Library (CVE-2022-26809), Windows Network File System (CVE-2022-24491 \u0438 CVE-2022-24497), Windows Server Service (CVE-2022-24541), Windows SMB (CVE-2022-24500) \u0438 Microsoft Dynamics 365 (CVE-2022-23259).\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows DNS Server, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0415\u0449\u0451 15 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n#Microsoft #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/474"}, {"timestamp": "2022-04-13T16:05:03Z", "date_only": false, "value": "2022-04-13T16:05:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2844", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "529c9156-05a9-4cb7-8f3c-513c4cab37dd", "content": "\u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0439 PartchTuesday \u043e\u0442 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 0-day \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u044b Microsoft Windows \u0438 \u0435\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, Microsoft Defender, Microsoft Dynamics, Microsoft Edge, Exchange Server, Office, SharePoint Server, Windows Hyper-V, DNS-\u0441\u0435\u0440\u0432\u0435\u0440, Skype, .NET, Visual Studio, Windows App Store.\n\n\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 10 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, 115 - \u043a\u0430\u043a \u0432\u0430\u0436\u043d\u044b\u0435, \u0430 3 - \u043a\u0430\u043a \u0441\u0440\u0435\u0434\u043d\u0438\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 47 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 47 - \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, 13 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 9 - \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 3 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u043e\u043c. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u00a026 \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Edge \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u043c\u0435\u0441\u044f\u0446\u0430.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a CVE-2022-24521\u00a0(\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,8) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows Common Log File, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043e \u0447\u0435\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043a\u043b\u0430\u0434 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0410\u041d\u0411 \u0421\u0428\u0410, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0435 \u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0440\u044f\u0434\u0430 \u0410\u0420\u0422. \u042d\u0442\u043e 15-\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 2022 \u0433\u043e\u0434\u0443.\n\n\u0414\u0440\u0443\u0433\u0430\u044f CVE-2022-26904\u00a0(\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441\u043b\u0443\u0436\u0431\u044b \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u0449\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0440\u0435\u0448\u0430\u0435\u043c\u044b\u0445 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0441\u0442\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 RPC Runtime Library \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-26809\u00a0\u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9.8. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 ZeroDayInitiative, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0440\u0442 (TCP-\u043f\u043e\u0440\u0442 135) \u043e\u0431\u044b\u0447\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443 \u0441\u0435\u0442\u0438, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u044d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\u00a0\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a - \u0435\u0449\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u0430\u043a\u00a0CVE-2022-24491\u00a0\u0438\u00a0CVE-2022-24497.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a CVE, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 Microsoft \u043d\u0430 \u0430\u043f\u0440\u0435\u043b\u044c 2022 \u0433\u043e\u0434\u0430, \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f\u00a0\u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/2844"}, {"timestamp": "2022-04-14T13:46:52Z", "date_only": false, "value": "2022-04-14T13:46:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/NeKaspersky/2116", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "d7c66856-2ac5-4d03-b903-79ac56e29be1", "content": "\u0412\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439 \u043e\u0442 Microsoft: \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows \u0438 \u0432 \u0440\u044f\u0434\u0435 \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \n\nPartchTuesday \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 10 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 (\u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u0432\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439, \u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438),  \u0442\u0440\u0438 \u2014 \u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0438\u0437 \u0441\u0435\u0431\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c. \u0421\u0430\u043c\u0443\u044e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS:3.1 \u0432 \u0446\u0435\u043b\u044b\u0445 9.8 \u0431\u0430\u043b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-26809. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u043e\u043d\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (Remote Procedure Call Runtime Library) Windows \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438. \u0415\u0451 \u0438 CVE-2022-24491 \u0438 CVE-2022-24497 (\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c Windows Network File System) \u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u043c\u0438, \u0442\u043e \u0435\u0441\u0442\u044c \u043e\u043d\u0438 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\u0414\u0430\u043b\u0435\u0435 \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435, \u043d\u043e \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u043f\u043e \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u0442 CVE-2022-24521 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS:3.1 \u0432 7.8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u0430\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0435\u0449\u0435 \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u043e\u043d\u0430 \u0441\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043e\u043d\u0430 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b CLFS (Common Log File System) Windows \u0438 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCVE-2022-26904 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows (Windows User Profile Service), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0415\u0439 \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 \u0432 7.0 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS:3.1. \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u043f\u0440\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0442\u0447\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 Microsoft Windows \u0438 \u0435\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b: Microsoft Defender, Microsoft Dynamics, Microsoft Edge, Exchange Server, Office, SharePoint Server, Windows Hyper-V, DNS-\u0441\u0435\u0440\u0432\u0435\u0440, Skype, .NET, Visual Studio, Windows App Store. \n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043c\u0435\u044e\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0441\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/2116"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-29562", "record": "CNVD-2022-29562", "field": "submitTime"}, {"timestamp": "2022-04-15T19:05:42Z", "date_only": false, "value": "2022-04-15T19:05:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-26904", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-15T19:15:00Z", "date_only": false, "value": "2022-04-15T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CF7G-GJ99-69W3", "record": "GHSA-CF7G-GJ99-69W3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-15T19:15:00Z", "date_only": false, "value": "2022-04-15T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26904", "record": "GSD-2022-26904", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-15T19:15:15.027Z", "date_only": false, "value": "2022-04-15T19:15:15.027000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-04-15T19:15:15.027Z", "date_only": false, "value": "2022-04-15T19:15:15.027", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26904", "record": "FKIE_CVE-2022-26904", "field": "published"}, {"timestamp": "2022-04-15T22:20:16Z", "date_only": false, "value": "2022-04-15T22:20:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/40890", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "30e8d184-83f4-424e-a283-cacf5a41d00f", "content": "\u203c CVE-2022-26904 \u203c\n\nWindows User Profile Service Elevation of Privilege Vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/40890"}, {"timestamp": "2022-04-16T00:00:00Z", "date_only": true, "value": "2022-04-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-29562", "record": "CNVD-2022-29562", "field": "openTime"}, {"timestamp": "2022-04-16T00:00:29Z", "date_only": false, "value": "2022-04-16T00:00:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CF7G-GJ99-69W3", "record": "GHSA-CF7G-GJ99-69W3", "field": "published"}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-26904", "field": "timestamps.asserted_at", "uuid": "29539e9a-87c9-4d00-9e82-810e9bfc7fec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-26904", "field": "timestamps.asserted_at", "uuid": "bab43561-4494-49db-a72c-2e77d9fd0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": true, "value": "2022-04-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-26904", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-26904", "field": "evidence.0.details.added_date", "uuid": "bab43561-4494-49db-a72c-2e77d9fd0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": true, "value": "2022-04-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-26904", "field": "evidence.0.details.date_added", "uuid": "29539e9a-87c9-4d00-9e82-810e9bfc7fec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-26904", "field": "timestamps.first_seen_at", "uuid": "29539e9a-87c9-4d00-9e82-810e9bfc7fec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-26904", "field": "timestamps.first_seen_at", "uuid": "bab43561-4494-49db-a72c-2e77d9fd0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-26904", "field": "status.status_updated_at", "uuid": "29539e9a-87c9-4d00-9e82-810e9bfc7fec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-26904", "field": "status.status_updated_at", "uuid": "bab43561-4494-49db-a72c-2e77d9fd0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-26904", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-05-10T07:35:00Z", "date_only": false, "value": "2022-05-10T07:35:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-05-11T22:00:00Z", "date_only": false, "value": "2022-05-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-05-11T22:00:00Z", "date_only": false, "value": "2022-05-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-05-11T22:00:00Z", "date_only": false, "value": "2022-05-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-05-16T00:00:00Z", "date_only": true, "value": "2022-05-16", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-26904", "field": "evidence.0.details.due_date", "uuid": "29539e9a-87c9-4d00-9e82-810e9bfc7fec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "f29fa505-9f78-4765-bb8b-cc2fa86660b8"}, {"timestamp": "2023-06-29T00:00:00Z", "date_only": false, "value": "2023-06-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-06-29T01:15:00Z", "date_only": false, "value": "2023-06-29T01:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26904", "record": "GSD-2022-26904", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-30T00:00:00Z", "date_only": false, "value": "2023-06-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-12-13T01:19:39.585Z", "date_only": false, "value": "2023-12-13T01:19:39.585524Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26904", "record": "GSD-2022-26904", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-03T19:06:26.599Z", "date_only": false, "value": "2024-06-03T19:06:26.599880Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-26904", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-03T19:06:26.599Z", "date_only": false, "value": "2024-06-03T19:06:26.599880Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26904", "record": "FKIE_CVE-2022-26904", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-02T17:05:13.203Z", "date_only": false, "value": "2024-07-02T17:05:13.203000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-07-03T20:02:22.970Z", "date_only": false, "value": "2024-07-03T20:02:22.970000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202204-0024", "record": "VAR-202204-0024", "field": "last_update_date"}, {"timestamp": "2024-08-03T05:18:38.088Z", "date_only": false, "value": "2024-08-03T05:18:38.088Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-26904", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:47:49.386Z", "date_only": false, "value": "2024-08-15T17:47:49.386+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-24T20:30:49.427Z", "date_only": false, "value": "2024-12-24T20:30:49.427043Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971537", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "21b87b64-d70e-48c2-9ee0-ca7f05512676", "url": "https://feedsin.space/feed/CISAKevBot/items/2971537"}, {"timestamp": "2025-01-02T18:51:39.740Z", "date_only": false, "value": "2025-01-02T18:51:39.740Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2022-26904", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "e7b781c4-f783-4beb-ae5d-f25ad373e8e4"}, {"timestamp": "2025-02-23T02:10:36Z", "date_only": false, "value": "2025-02-23T02:10:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "919240e7-33c2-4ee5-a375-f6b8730e953b"}, {"timestamp": "2025-02-23T04:10:45Z", "date_only": false, "value": "2025-02-23T04:10:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "bc0f1efc-ea35-4c57-a87e-8110a829f915"}, {"timestamp": "2025-10-21T23:15:41.848Z", "date_only": false, "value": "2025-10-21T23:15:41.848Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-26904", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:41.848Z", "date_only": false, "value": "2025-10-21T23:15:41.848Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-26904", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:31Z", "date_only": false, "value": "2025-10-22T00:32:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CF7G-GJ99-69W3", "record": "GHSA-CF7G-GJ99-69W3", "field": "modified"}, {"timestamp": "2026-01-06T21:23:20.653Z", "date_only": false, "value": "2026-01-06T21:23:20.653Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26904", "record": "MSRC_CVE-2022-26904", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-02T12:27:48.409Z", "date_only": false, "value": "2026-02-02T12:27:48.409339Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/140419b5-7d5a-41d1-8d8e-8444dc16e9e1", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "fd8f7fa1-2c02-4dc4-b4e6-e80fdf1c5256", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/140419b5-7d5a-41d1-8d8e-8444dc16e9e1"}, {"timestamp": "2026-02-02T12:27:48.409Z", "date_only": false, "value": "2026-02-02T12:27:48.409339Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/140419b5-7d5a-41d1-8d8e-8444dc16e9e1", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "6315f4aa-8409-44c2-b989-cec53a14aea8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/140419b5-7d5a-41d1-8d8e-8444dc16e9e1"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-26904", "field": "timestamps.recorded_at", "uuid": "29539e9a-87c9-4d00-9e82-810e9bfc7fec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:36:05.480Z", "date_only": false, "value": "2026-06-17T04:36:05.480", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26904", "record": "FKIE_CVE-2022-26904", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:17.080Z", "date_only": false, "value": "2026-06-19T12:47:17.080448Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f0fd124-0288-44ce-a9bb-3038845c5512", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "ab2bbd8c-a4b1-4cff-a9cf-3b1c17d27330", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f0fd124-0288-44ce-a9bb-3038845c5512"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-26904", "field": "timestamps.recorded_at", "uuid": "bab43561-4494-49db-a72c-2e77d9fd0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:49.526Z", "date_only": false, "value": "2026-06-23T11:13:49.526946Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bab43561-4494-49db-a72c-2e77d9fd0d68", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "0eef5c7c-27b4-40c8-86b0-6724c8277c2f", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bab43561-4494-49db-a72c-2e77d9fd0d68"}, {"timestamp": "2026-06-23T14:05:21.121Z", "date_only": false, "value": "2026-06-23T14:05:21.121728Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4070fee8-6f70-4da4-944f-7cc22d83f0e6", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "1c37b99a-9576-4bca-b68c-894d592b7009", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4070fee8-6f70-4da4-944f-7cc22d83f0e6"}, {"timestamp": "2026-07-17T05:00:06.552Z", "date_only": false, "value": "2026-07-17T05:00:06.552486Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/167", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "95cfaabc-d8b1-4eda-ad60-919f5b28ab60", "url": "https://t.me/EchelonEyes/167"}, {"timestamp": "2026-07-17T06:00:05.306Z", "date_only": false, "value": "2026-07-17T06:00:05.306392Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/221", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "f4f7a211-6348-4948-90e5-a0b649240bf8", "url": "https://t.me/EchelonEyes/221"}, {"timestamp": "2026-07-18T00:00:36.118Z", "date_only": false, "value": "2026-07-18T00:00:36.118597Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/167", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "9cf954dc-0e4b-437a-8fe8-9a72f7e742ef", "url": "https://t.me/EchelonEyes/167"}, {"timestamp": "2026-07-18T00:00:36.898Z", "date_only": false, "value": "2026-07-18T00:00:36.898220Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/221", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "43692932-8d7f-4889-98e5-bd0d40b48200", "url": "https://t.me/EchelonEyes/221"}, {"timestamp": "2026-09-01T20:01:45.678Z", "date_only": false, "value": "2026-09-01T20:01:45.678775Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49990", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "f6da226f-3717-485d-8cf8-657d5bc91270", "url": "https://t.me/hacking_Attack/49990"}, {"timestamp": "2026-09-06T01:00:05.062Z", "date_only": false, "value": "2026-09-06T01:00:05.062091Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/49990", "record": "CVE-2022-26904", "field": "creation_timestamp", "uuid": "3eaa2d9f-6724-4202-81ca-63ba9c28dfc2", "url": "https://t.me/hacking_Attack/49990"}]}