CVE-2021-42278CISA KEV
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
- Product
- Active Directory
- Added to KEV
- 11 Apr 2022
- Federal remediation due
- 2 May 2022
- Known ransomware use
- Yes