CVE-2021-42287: high-severity vulnerability in Microsoft Windows Server 2008 R2 Service Pack 1
Active Directory Domain Services Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA, has a public proof of concept and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply updates per vendor instructions.
A flaw in Active Directory Domain Services allows an attacker with network access to gain higher privileges on the system than they should have, potentially giving them control over critical domain resources.
A privilege escalation vulnerability in AD DS exploits insufficient validation of authentication requests, allowing a network-adjacent attacker to escalate privileges without requiring prior authenticated access. The vulnerability impacts the Kerberos authentication mechanism and can be leveraged to compromise domain controller integrity and domain-wide security.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.