{"history":[{"alert":0,"cve":"CVE-2021-42278","id":22295,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.73297, \"percentile\": 0.99468}"},{"alert":0,"cve":"CVE-2021-42278","id":19914,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.73297, \"percentile\": 0.99465}"},{"alert":0,"cve":"CVE-2021-42278","id":17880,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.73297, \"percentile\": 0.99464}"},{"alert":0,"cve":"CVE-2021-42278","id":15944,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.73297, \"percentile\": 0.99464}"},{"alert":0,"cve":"CVE-2021-42278","id":13922,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.73297, \"percentile\": 0.99464}"},{"alert":0,"cve":"CVE-2021-42278","id":11704,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.73297, \"percentile\": 0.99463}"},{"alert":0,"cve":"CVE-2021-42278","id":9690,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.73297, \"percentile\": 0.99463}"},{"alert":1,"cve":"CVE-2021-42278","id":8374,"kind":"cna","observed_at":1793852400,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-04T03:30:38.000Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42278\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2021-42278\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2021-11-09T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-04-11\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42278\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-noinfo Not enough information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-06T03:55:22.857Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42278\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-04-11T00:00:00.000Z\", \"value\": \"CVE-2021-42278 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2008 R2 Service Pack 1\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.1.7601.25769\", \"status\": \"affected\", \"version\": \"6.1.7601.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.1.7601.25769\", \"status\": \"affected\", \"version\": \"6.1.7601.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Windows Server 2008 Service Pack 2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.0.6003.21282\", \"status\": \"affected\", \"version\": \"6.0.6003.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Windows Server 2008 Service Pack 2 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.0.6003.21282\", \"status\": \"affected\", \"version\": \"6.0.6003.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2012\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.2.9200.23517\", \"status\": \"affected\", \"version\": \"6.2.9200.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2012 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.2.9200.23517\", \"status\": \"affected\", \"version\": \"6.2.9200.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2012 R2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.3.9600.20174\", \"status\": \"affected\", \"version\": \"6.3.9600.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2012 R2 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"6.3.9600.20174\", \"status\": \"affected\", \"version\": \"6.3.9600.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2016\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.14393.4770\", \"status\": \"affected\", \"version\": \"10.0.14393.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2016 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.14393.4770\", \"status\": \"affected\", \"version\": \"10.0.14393.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2019\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.17763.2300\", \"status\": \"affected\", \"version\": \"10.0.17763.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2019 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.17763.2300\", \"status\": \"affected\", \"version\": \"10.0.17763.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2022\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.20348.350\", \"status\": \"affected\", \"version\": \"10.0.20348.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server version 2004\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.19041.1348\", \"status\": \"affected\", \"version\": \"10.0.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server version 20H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.19042.1348\", \"status\": \"affected\", \"version\": \"10.0.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.17763.2300\", \"versionStartIncluding\": \"10.0.17763.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.17763.2300\", \"versionStartIncluding\": \"10.0.17763.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.20348.350\", \"versionStartIncluding\": \"10.0.20348.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19041.1348\", \"versionStartIncluding\": \"10.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.19042.1348\", \"versionStartIncluding\": \"10.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.14393.4770\", \"versionStartIncluding\": \"10.0.14393.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.14393.4770\", \"versionStartIncluding\": \"10.0.14393.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.0.6003.21282\", \"versionStartIncluding\": \"6.0.6003.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.0.6003.21282\", \"versionStartIncluding\": \"6.0.6003.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.1.7601.25769\", \"versionStartIncluding\": \"6.1.7601.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.1.7601.25769\", \"versionStartIncluding\": \"6.1.7601.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.2.9200.23517\", \"versionStartIncluding\": \"6.2.9200.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.2.9200.23517\", \"versionStartIncluding\": \"6.2.9200.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.3.9600.20174\", \"versionStartIncluding\": \"6.3.9600.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"6.3.9600.20174\", \"versionStartIncluding\": \"6.3.9600.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2021-11-09T08:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Active Directory Domain Services Elevation of Privilege Vulnerability\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Elevation of Privilege\", \"lang\": \"en-US\", \"type\": \"Impact\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-19T16:27:25.627Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Active Directory Domain Services Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42278\"}], \"title\": \"Active Directory Domain Services Elevation of Privilege Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2021-42278\", \"datePublished\": \"2021-11-10T00:47:05.000Z\", \"dateReserved\": \"2021-10-12T00:00:00.000Z\", \"dateUpdated\": \"2026-08-19T16:27:25.627Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2021-42278","id":7238,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.73297, \"percentile\": 0.99462}"},{"alert":0,"cve":"CVE-2021-42278","id":5015,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.73297, \"percentile\": 0.99461}"},{"alert":0,"cve":"CVE-2021-42278","id":2797,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.73297, \"percentile\": 0.9946}"},{"alert":1,"cve":"CVE-2021-42278","id":1145,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2021-42278\", \"cwes\": [\"CWE-20\"], \"dateAdded\": \"2022-04-11\", \"dueDate\": \"2022-05-02\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2021-42278\", \"product\": \"Active Directory\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability\"}"}],"record":{"affected":[{"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1","vendor":"Microsoft","versions":[{"lessThan":"6.1.7601.25769","status":"affected","version":"6.1.7601.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.1.7601.25769","status":"affected","version":"6.1.7601.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows Server 2008 Service Pack 2","vendor":"Microsoft","versions":[{"lessThan":"6.0.6003.21282","status":"affected","version":"6.0.6003.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows Server 2008 Service Pack 2 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.0.6003.21282","status":"affected","version":"6.0.6003.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012","vendor":"Microsoft","versions":[{"lessThan":"6.2.9200.23517","status":"affected","version":"6.2.9200.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.2.9200.23517","status":"affected","version":"6.2.9200.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.20174","status":"affected","version":"6.3.9600.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.20174","status":"affected","version":"6.3.9600.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.4770","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.4770","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.2300","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.2300","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.350","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server version 2004","vendor":"Microsoft","versions":[{"lessThan":"10.0.19041.1348","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server version 20H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19042.1348","status":"affected","version":"10.0.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T03:30:38.000Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42278"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2021-42278","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2021-11-09T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-04-11","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42278"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-06T03:55:22.857Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42278"}],"timeline":[{"lang":"en","time":"2022-04-11T00:00:00.000Z","value":"CVE-2021-42278 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1","vendor":"Microsoft","versions":[{"lessThan":"6.1.7601.25769","status":"affected","version":"6.1.7601.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.1.7601.25769","status":"affected","version":"6.1.7601.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows Server 2008 Service Pack 2","vendor":"Microsoft","versions":[{"lessThan":"6.0.6003.21282","status":"affected","version":"6.0.6003.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows Server 2008 Service Pack 2 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.0.6003.21282","status":"affected","version":"6.0.6003.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012","vendor":"Microsoft","versions":[{"lessThan":"6.2.9200.23517","status":"affected","version":"6.2.9200.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.2.9200.23517","status":"affected","version":"6.2.9200.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.20174","status":"affected","version":"6.3.9600.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2012 R2 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"6.3.9600.20174","status":"affected","version":"6.3.9600.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.4770","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.4770","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.2300","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.2300","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.350","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server version 2004","vendor":"Microsoft","versions":[{"lessThan":"10.0.19041.1348","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server version 20H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19042.1348","status":"affected","version":"10.0.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.17763.2300","versionStartIncluding":"10.0.17763.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.17763.2300","versionStartIncluding":"10.0.17763.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.20348.350","versionStartIncluding":"10.0.20348.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.19041.1348","versionStartIncluding":"10.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.19042.1348","versionStartIncluding":"10.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.14393.4770","versionStartIncluding":"10.0.14393.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.14393.4770","versionStartIncluding":"10.0.14393.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.0.6003.21282","versionStartIncluding":"6.0.6003.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.0.6003.21282","versionStartIncluding":"6.0.6003.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.1.7601.25769","versionStartIncluding":"6.1.7601.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.1.7601.25769","versionStartIncluding":"6.1.7601.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.2.9200.23517","versionStartIncluding":"6.2.9200.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.2.9200.23517","versionStartIncluding":"6.2.9200.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.3.9600.20174","versionStartIncluding":"6.3.9600.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","versionEndExcluding":"6.3.9600.20174","versionStartIncluding":"6.3.9600.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2021-11-09T08:00:00.000Z","descriptions":[{"lang":"en-US","value":"Active Directory Domain Services Elevation of Privilege Vulnerability"}],"metrics":[{"cvssV3_1":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"Elevation of Privilege","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"dateUpdated":"2026-08-19T16:27:25.627Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"Active Directory Domain Services Elevation of Privilege Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42278"}],"title":"Active Directory Domain Services Elevation of Privilege Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2021-42278","datePublished":"2021-11-10T00:47:05.000Z","dateReserved":"2021-10-12T00:00:00.000Z","dateUpdated":"2026-08-19T16:27:25.627Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794435601,"cve":"CVE-2021-42278","description":"Active Directory Domain Services Elevation of Privilege Vulnerability","epss":{"date":"2026-11-12","epss":0.73297,"percentile":0.99468},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2021-42278","cwes":["CWE-20"],"dateAdded":"2022-04-11","dueDate":"2022-05-02","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42278","product":"Active Directory","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.","vendorProject":"Microsoft","vulnerabilityName":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability"},"kev_checked":1794522003,"products":"Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server version 2004, Microsoft Windows Server version 20H2","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42278","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42278","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42278"],"score":{"baseScore":7.5,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Active Directory Domain Services Elevation of Privilege Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.group-ib.com/blog/stray-cat-network-edge/?amp%3Butm_campaign=network-security&amp%3Butm_medium=social","id":243,"publisher":"Group-IB","title":"Stray Cat, Open Doors: How k0t Wanders Through the Network Edge"}]}