CVE-2021-42287
Microsoft Windows Server 2008 r2
Raw vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2021-42287 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 0.5% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2021-42287 is an elevation of privilege vulnerability affecting Active Directory Domain Services. The flaw carries a CVSS 3.1 base score of 7.5 with a network attack vector, high attack complexity, and low privileges required, enabling high impact to confidentiality, integrity, and availability on domain controllers.
An authenticated attacker with low privileges can exploit the issue over the network to obtain elevated rights within an Active Directory environment, although successful exploitation requires specific conditions that increase complexity.
Microsoft has published security guidance and patches addressing the vulnerability through its Security Response Center. The flaw is also catalogued by CISA among vulnerabilities known to have been exploited in the wild.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-29262
Vulnerability Data
Active Directory Domain Services Elevation of Privilege Vulnerability
- CWE(s)
- KEV Date Added
- 11 April 2022
Related Threats
Threat-Actor AttributionAI
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.