Remote Procedure Call Runtime Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1809
The Remote Procedure Call (RPC) runtime component of Microsoft Windows 10 Version 1809 contains a flaw that allows remote code execution. An attacker with network access can exploit it without authentication or user interaction, gaining the ability to run code with high impact to confidentiality, integrity and availability.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 1 day before it was disclosed. Public exploit code (PoC-in-GitHub) was available 1 day before disclosure.
- Disclosedday 0
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
Detection
1 rule for this CVE · 0 general rules for its techniquesRules for this CVE
1Sigma ruleAn open, vendor-neutral detection rule for log data. Security teams convert Sigma rules into searches for their own SIEM. that reference CVE-2022-26809 directly.Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
What security researchers reported
Not named in any threat report yetAlso mentioned in 5 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- blockioc19 Oct 2025
- Thor Lite Scan - 10.7.15 - Ubuntu Scan on Archived Files21 May 2024
- Cyble — Malware Campaign Targets InfoSec Community: Threat Actor Uses Fake Proof of Concept to Deliver Cobalt-Strike Beacon23 May 2022
- Malware Campaign Targets InfoSec Community: Threat Actor Uses Fake Proof of Concept to Deliver Cobalt-Strike Beacon20 May 2022
- Microsoft's April 2022 Patch Tuesday Fixes 2 Zero-days and 119 Bugs21 Apr 2022