CVE-2022-26923
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CVSS
—
Sem CVSS
EPSS
83.5%
p100
KEV
SIM
18 de ago. de 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Microsoft / Active Directory
Vulnerabilidade
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Adicionado ao KEV
18 de ago. de 2022
Corrigir até
8 de set. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.
Ação necessária
Apply updates per vendor instructions.
Notas
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26923; https://nvd.nist.gov/vuln/detail/CVE-2022-26923