CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-11-10
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42287) Technical Advisory
[Affected Scope] Windows Server systems configured as Active Directory Domain Controllers (DCs).
[Impact] A standard domain user can exploit Kerberos name resolution flaws to impersonate a Domain Controller computer account, escalating privileges to Domain Admin and compromising the entire AD forest.
[Mitigation] Apply the latest Microsoft cumulative security updates to all Domain Controllers and enforce Kerberos validation hardening via registry configurations.