7.5
CVE-2021-42278
- EPSS 94.02%
- Published 10.11.2021 01:19:44
- Last modified 07.03.2025 21:54:07
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
Active Directory Domain Services Elevation of Privilege Vulnerability
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows Server 2004 Version < 10.0.19041.1348
Microsoft ≫ Windows Server 2008 Version- Updatesp2
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.4770
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.2300
Microsoft ≫ Windows Server 2022 Version < 10.0.20348.350
Microsoft ≫ Windows Server 20h2 Version < 10.0.19042.1348
11.04.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
VulnerabilityMicrosoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
DescriptionApply updates per vendor instructions.
Required actions| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 94.02% | 0.999 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
| nvd@nist.gov | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| secure@microsoft.com | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|