CVE-2022-26923
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published May 10, 2022
Updated: Jan 2, 2025
CWE ID 295
Summary
CVE-2022-26923 is an eleventh-hour gift for cybercriminals: an Elevation of Privilege vulnerability affecting Active Directory Domain Services. An attacker who successfully exploits this issue can elevate their privileges, granting them unauthorized access to sensitive data or the ability to install malware. Microsoft advises immediate patching to mitigate this risk, as an unsecured environment could lead to serious consequences. This vulnerability underscores the importance of maintaining up-to-date software and robust cybersecurity practices.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.