CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Active Directory Federation Services (AD FS) Privilege Escalation Vulnerability (CVE-2026-56155) Security Advisory
[Affected Scope] Windows Server environments with Active Directory Federation Services (AD FS) enabled
[Impact] An authorized local attacker with low privileges can exploit insufficient access control granularity to elevate privileges to SYSTEM
[Mitigation] Apply the official Microsoft security updates immediately and audit AD FS service account and directory permissions
Citrix Session Recording Privilege Escalation Vulnerability (CVE-2024-8068) Technical Advisory
[Affected Scope] Authenticated users within the same Windows Active Directory domain as the Citrix Session Recording server
[Impact] Privilege escalation to 'NetworkService' account, enabling unauthorized system control and potential lateral movement within the AD domain
[Mitigation] Immediately upgrade Citrix Session Recording components to the latest patched versions recommended by the vendor
VMware ESXi Authentication Bypass and Privilege Escalation via Active Directory Integration (CVE-2024-37085)
[Affected Scope] VMware ESXi hosts configured to use Active Directory (AD) for user management.
[Impact] A malicious actor with group creation permissions in AD can gain full administrative access to the ESXi host by re-creating the deleted 'ESXi Admins' group.
[Mitigation] Apply the official security patches from Broadcom or change the default ESXi Admins group setting to an unprivileged/non-existent group name.
Windows LSA Spoofing and NTLM Relay Vulnerability (CVE-2022-26925) Security Advisory
[Affected Scope] Windows and Windows Server operating systems, specifically Active Directory Domain Controllers
[Impact] Unauthenticated remote attackers can call methods on the LSARPC interface to coerce the Domain Controller to authenticate to an arbitrary target via NTLM, leading to full domain takeover
[Mitigation] Apply the official Microsoft cumulative security updates immediately, and enforce Extended Protection for Authentication (EPA) along with SMB signing to block NTLM relay paths
Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2022-26923) Analysis and Mitigation Guide
[Affected Scope] All Windows Server Domain Controllers in environments where Active Directory Certificate Services (ADCS) is enabled.
[Impact] A low-privileged domain user can obtain a certificate for the Domain Controller's computer account, leading to full Domain Admin privilege escalation.
[Mitigation] Apply the official Microsoft cumulative security updates and harden the dNSHostName mapping validation on ADCS.
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42287) Technical Advisory
[Affected Scope] Windows Server systems configured as Active Directory Domain Controllers (DCs).
[Impact] A standard domain user can exploit Kerberos name resolution flaws to impersonate a Domain Controller computer account, escalating privileges to Domain Admin and compromising the entire AD forest.
[Mitigation] Apply the latest Microsoft cumulative security updates to all Domain Controllers and enforce Kerberos validation hardening via registry configurations.
Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42278) Analysis and Mitigation Guide
[Affected Scope] All Windows Server Domain Controllers (from 2008 to 2022) running Active Directory Domain Services (AD DS)
[Impact] A standard domain user can spoof a Domain Controller's computer account name, escalate privileges to Domain Admin, and achieve full domain compromise
[Mitigation] Apply the latest Microsoft cumulative security updates and ensure the KB5008380 registry settings are transitioned to Enforcement mode