CVE-2026-541218.8HighCWE-285
Microsoft Windows 10 Version 1607 vulnerability
Microsoft · Windows 10 Version 1607
Not in CISA KEVVendor fix available
0.8%probability of exploitation in the next 30 days
55th percentile
050100
Higher than 55% of scored CVEs
8.8HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: Dark Reading, 28 Jul.
Quiet for 13 weekslast report 29 Jul2 articles2 outlets
- Tue 28 Jul, 17:41 UTC. Dark Reading, first report. Microsoft addresses critical AD Cert Services bug CVE-2026-54121.
- Wed 29 Jul, 14:42 UTC. SecurityOnline, its first report on the story. Low priv users hijack the DCs via CVE-2026-54121 flaw.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 28 Jul 17:41 | Dark Reading | Microsoft addresses critical AD Cert Services bug CVE-2026-54121 |
| 29 Jul 14:42 | SecurityOnline | Low priv users hijack the DCs via CVE-2026-54121 flaw |
- Low priv users hijack the DCs via CVE-2026-54121 flawSecurityOnline
- Microsoft addresses critical AD Cert Services bug CVE-2026-54121Dark Reading · first in our coverage
New articles also arrive in the RSS feed.