Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2022-26923 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.
|
Microsoft | Active Directory | Aug 18, 2022 | Sep 8, 2022 | |
|
CVE-2021-42278 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Active Directory | Apr 11, 2022 | May 2, 2022 | Ransomware |
|
CVE-2021-42287 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Active Directory | Apr 11, 2022 | May 2, 2022 | Ransomware |
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.
Active Directory · Aug 18, 2022
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
Active Directory · Apr 11, 2022
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
Active Directory · Apr 11, 2022