CVE-2022-21857
Published: 11 January 2022
Summary
CVE-2022-21857 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 8.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-21857 is an elevation of privilege vulnerability in Active Directory Domain Services. The flaw received a CVSS v3.1 base score of 8.8 with an attack vector of network, low attack complexity, and low privileges required, allowing an authenticated attacker to obtain high impacts on confidentiality, integrity, and availability.
An attacker who already possesses a low-privileged domain account can exploit the issue over the network without user interaction to elevate privileges within Active Directory Domain Services, potentially gaining full control over domain resources.
Microsoft has published official guidance and remediation information for the vulnerability in its Security Response Center at the referenced URLs, directing administrators to the applicable security updates for affected Windows Server versions.
The associated EPSS score has remained flat at 0.0720 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-27013
Vulnerability details
Active Directory Domain Services Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.