CVE-2021-42278: Microsoft Active Directory Domain Services Privilege
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability. Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
- CISA KEV-listed (remediation due 2022-05-02)
- used in ransomware campaigns
- EPSS 73.3% (99.5% percentile)
- CVSS 7.5 high
Detection rules
Related briefings
- Access broker k0t raids Fortinet and Palo Alto edge devices 2026-10-21
- AI agents compromised 395 organizations via PaperCut 2026-09-09
- RansomHub (Knight/Cyclops Rebranded): CVE-2024-3400 and ZeroLogon in Sub-14-Hour Attack, PCHunter EDR Termination, FileZilla Exfiltration, and Multi-Platform Ransomware Variants 2026-02-16
Linked threat actors
- RansomHub machine-inferred link
- CosmicBeetle machine-inferred link