Active Directory Domain Services Elevation of Privilege Vulnerability
PoC: CVE-2025-21293
CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsoft patched this in January 2025. Apply updates to mitigate risks.
PoC: threat-simlab
Threat simulation lab for a privilege escalation vulnerability in AD Domain Services using CVE-2025-21293
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free