In CISA KEV8.8 High
CVE-2022-26923
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
MicrosoftActive Directory
Status
- Exploited in the wild
- In CISA KEV since 18 Aug 2022
- Vendor fix available
Federal deadlineThu 8 Sep 2022, 23:59 UTC
Passed 1507 days ago
CISA KEV · added 18 Aug 2022
Exploit probabilityEPSSchecked 25 Oct
84%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Active Directory Domain Services Elevation of Privilege Vulnerability
CISA required action
Apply updates per vendor instructions.
Coverage 1 article · 1 outlet
- AD CS Abuse via CVE-2022-26923 Drives Privilege Escalation WaveUnit 42 · first in our coverage