Actively exploited in the wild
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Microsoft - Active Directory · Listed in the CISA KEV since 2022-08-18. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-26923
HighCVSS 8.8KEVSummary
A privilege elevation vulnerability in Active Directory Domain Services (AD DS). An attacker can gain domain administrator privileges.
Risk Assessment
It allows full takeover of the Active Directory domain, posing a critical threat to the entire infrastructure.
Recommendation
Immediately deploy the May 2022 updates and consider enabling StrongCertificateBindingEnforcement.
Other vulnerabilities in Active Directory Domain Services
See all- CVE-2021-42287HighActively exploited
Active Directory Domain Services Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2021-42278HighActively exploited
Active Directory Domain Services Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2026-69809High
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-69546High
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-69524High
Use-after-free vulnerability in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-69359High
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-62813High
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
- CVE-2026-62762Medium
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
- CVE-2026-50366Medium
A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over the network.
- CVE-2026-57976Medium
A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over the network.
Original NVD description (English source)
Active Directory Domain Services Elevation of Privilege Vulnerability