CVE-2021-42278
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CVSS
7.5
High
EPSS
73.3%
p99
KEV
YES
Apr 11, 2022
Exploit Today
80
0-100
Published: Nov 10, 2021 · Last modified: Aug 19, 2026
73.3%EPSS · 30 days73.3%
2026-09-162026-10-14
Product
Microsoft / Active Directory
Vulnerability
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Added to KEV
Apr 11, 2022
Remediate by
May 2, 2022
Known ransomware use
Yes
Summary description
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-42278
Active Directory Domain Services Elevation of Privilege Vulnerability