PULSE
ES
FEED
ransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Other
← All CVEs
CVE WatchAug 19, 2026

CVE-2021-42287

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

CVSS

7.5

High

EPSS

77.2%

p100

KEV

YES

Apr 11, 2022

Exploit Today

80

0-100

Published: Nov 10, 2021 · Last modified: Aug 19, 2026

EPSS · 30d
77.2%EPSS · 30 days77.2%
2026-09-172026-10-15
KEV catalog record

Product

Microsoft / Active Directory

Vulnerability

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Added to KEV

Apr 11, 2022

Remediate by

May 2, 2022

Known ransomware use

Yes

Summary description

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-42287

Technical description

Active Directory Domain Services Elevation of Privilege Vulnerability

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-422787.5 HIG
99.5%
KEV—80Microsoft Active Directory Domain Services Privilege Escalation Vulnerability58dCVE-2022-26923—
99.7%
KEV—80Microsoft Active Directory Domain Services Privilege Escalation Vulnerability—