CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-05-10
Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2022-26923) Analysis and Mitigation Guide
[Affected Scope] All Windows Server Domain Controllers in environments where Active Directory Certificate Services (ADCS) is enabled.
[Impact] A low-privileged domain user can obtain a certificate for the Domain Controller's computer account, leading to full Domain Admin privilege escalation.
[Mitigation] Apply the official Microsoft cumulative security updates and harden the dNSHostName mapping validation on ADCS.