CVE-2021-42278
Act now ● On CISA KEV — actively exploited used in ransomware
Actively exploited — on the CISA KEV list.
CVSS base
7.5
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — probability of exploitation (30 days)
73.3%
99.4th percentile
CISA KEV
Listed
Added 2022-04-11 · patch by 2022-05-02
Weakness / dates
—
Published 2021-11-10 · modified 2026-08-19
Description
Active Directory Domain Services Elevation of Privilege Vulnerability