CISA Known Exploited Vulnerability

CVE-2021-42278 Ransomware

Microsoft · Active Directory

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Date added
BOD 22-01 due date
CWE CWE-20
Ransomware Known

CISA description

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.