Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Published Apr 11, 2022·Updated Aug 19, 2026

NVD Description

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

[POC] CVE-2021-42278 — Pachine

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

[POC] CVE-2021-42278 — noPac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

[POC] CVE-2021-42278 — sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

[POC] CVE-2021-42278 — noPac-detection

Detection script for CVE-2021-42278 and CVE-2021-42287

[POC] CVE-2021-42278 — noPac

Exploiting CVE-2021-42278 and CVE-2021-42287

[POC] CVE-2021-42278 — noPac

Go implementation of NoPac, exploiting CVE-2021-42278 and CVE-2021-42287

Get alerted for CVEs like this