CISA Known Exploited Vulnerability

CVE-2021-42287 Ransomware

Microsoft · Active Directory

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Date added
BOD 22-01 due date
CWE CWE-269
Ransomware Known

CISA description

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.