Rewterz Threat Advisory – CVE-2021-42278 – Microsoft Windows privilege escalation

Severity

High

Analysis Summary

CVE-2021-42278

Microsoft could allow a remote authenticated attacker to gain elevated privileges on the system, caused by a flaw in the Active Directory Domain Services. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to execute arbitrary code with higher privileges.

Impact

• Privilege Escalation

Affected Vendors

Microsoft

Affected Products

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 R2
• Microsoft Windows Server 2016
• Microsoft Windows Server 2019

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system.

Refer to Microsoft advisory for the complete list of affected products and their respective patches.