CVE-2022-26923—Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

漏洞名称

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

描述

An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26923
• https://nvd.nist.gov/vuln/detail/CVE-2022-26923

相关 CWE

• CWE-295