Active Directory Domain Services Elevation of Privilege Vulnerability

A flaw in Active Directory Domain Services allows an authenticated attacker to escalate their privileges to domain administrator level. An attacker with a regular user account can abuse this vulnerability to gain complete control over the entire domain.

CVE-2021-42278 is a privilege escalation vulnerability in AD DS that allows an authenticated attacker to elevate privileges to domain admin via improper validation of certificate requests. The attack vector requires prior authentication and exploits the certificate enrollment process to impersonate a domain controller or administrative account.