CVE-2022-37976

Summary

CVE-2022-37976 is an elevation of privilege vulnerability affecting Microsoft Active Directory Certificate Services. Successful exploitation allows an attacker to run scripts with elevated privileges, potentially leading to significant security impacts such as data theft or unauthorized system modifications. The vulnerability stems from insufficient input validation in the Certification Authority web enrollment pages, enabling remote code execution. Organizations utilizing Active Directory Certificate Services are advised to apply the available patch promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.