CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42287) Technical Advisory
[Affected Scope] Windows Server systems configured as Active Directory Domain Controllers (DCs).
[Impact] A standard domain user can exploit Kerberos name resolution flaws to impersonate a Domain Controller computer account, escalating privileges to Domain Admin and compromising the entire AD forest.
[Mitigation] Apply the latest Microsoft cumulative security updates to all Domain Controllers and enforce Kerberos validation hardening via registry configurations.
Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42278) Analysis and Mitigation Guide
[Affected Scope] All Windows Server Domain Controllers (from 2008 to 2022) running Active Directory Domain Services (AD DS)
[Impact] A standard domain user can spoof a Domain Controller's computer account name, escalate privileges to Domain Admin, and achieve full domain compromise
[Mitigation] Apply the latest Microsoft cumulative security updates and ensure the KB5008380 registry settings are transitioned to Enforcement mode