CVE-2024-26226: Windows Distributed File System (DFS) Information Disclosure Vulnerability
Published Apr 9, 2024
·Updated
Windows Distributed File System (DFS) Information Disclosure Vulnerability
Affected Software
25 affected componentsFixes available
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2022, 23H2 Edition
Microsoft Windows Server 2012
Microsoft Windows Server 2012
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016<10.0.14393.6897
Microsoft Windows Server 2019<10.0.17763.5696
Microsoft Windows Server 2022<10.0.20348.2402
Microsoft Windows Server 2022 23h2<10.0.25398.830
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2
Event History
Apr 9, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-26226?
CVE-2024-26226 is rated as a medium severity vulnerability.
2
How do I fix CVE-2024-26226?
To fix CVE-2024-26226, you need to apply the appropriate security updates for your affected Windows Server version.
3
What systems are affected by CVE-2024-26226?
CVE-2024-26226 affects various versions of Microsoft Windows Server including 2008, 2012, 2016, 2019, and 2022.
4
What type of vulnerability is CVE-2024-26226?
CVE-2024-26226 is an information disclosure vulnerability related to the Windows Distributed File System (DFS).
5
Can CVE-2024-26226 be exploited remotely?
Yes, CVE-2024-26226 can potentially be exploited remotely by an attacker.