CVE-2021-42287: Microsoft Active Directory Domain Services Privilege
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability. Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
- CISA KEV-listed (remediation due 2022-05-02)
- used in ransomware campaigns
- EPSS 77.2% (99.6% percentile)
- CVSS 7.5 high
Detection rules
- Suspicious Computer Account Name Change CVE-2021-42287 high
- Potential CVE-2021-42287 Exploitation Attempt medium
- Win Susp Computer Name Containing Samtheadmin critical
Related briefings
- Access broker k0t raids Fortinet and Palo Alto edge devices 2026-10-21
- AI agents compromised 395 organizations via PaperCut 2026-09-09
Linked threat actors
- CosmicBeetle machine-inferred link