CVE-2022-26923
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
3Exploited in Wild
YesDecision
Descriptions
Active Directory Domain Services Elevation of Privilege Vulnerability
Una vulnerabilidad de ElevaciĆ³n de Privilegios en Active Directory Domain Services
This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability.
The specific flaw exists within the issuance of certificates. By including crafted data in a certificate request, an attacker can obtain a certificate that allows the attacker to authenticate to a domain controller with a high level of privilege. An attacker can leverage this vulnerability to escalate privileges and disclose stored credentials, leading to further compromise.
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-03-11 CVE Reserved
- 2022-05-10 CVE Published
- 2022-05-12 First Exploit
- 2022-08-18 Exploited in Wild
- 2022-09-08 KEV Due Date
- 2024-08-03 CVE Updated
- 2024-10-09 EPSS Updated
CWE
- CWE-295: Improper Certificate Validation
CAPEC
References (6)
URL | Date | SRC |
---|---|---|
https://github.com/lsecqt/CVE-2022-26923-Powershell-POC | 2022-08-17 | |
https://github.com/r1skkam/TryHackMe-CVE-2022-26923 | 2022-05-12 | |
https://github.com/Gh-Badr/CVE-2022-26923 | 2023-12-09 |
URL | Date | SRC |
---|---|---|
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26923 | 2024-06-28 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Microsoft Search vendor "Microsoft" | Windows 10 1507 Search vendor "Microsoft" for product "Windows 10 1507" | < 10.0.10240.19297 Search vendor "Microsoft" for product "Windows 10 1507" and version " < 10.0.10240.19297" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 10 1607 Search vendor "Microsoft" for product "Windows 10 1607" | < 10.0.14393.5850 Search vendor "Microsoft" for product "Windows 10 1607" and version " < 10.0.14393.5850" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 10 1809 Search vendor "Microsoft" for product "Windows 10 1809" | < 10.0.17763.4252 Search vendor "Microsoft" for product "Windows 10 1809" and version " < 10.0.17763.4252" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 10 1909 Search vendor "Microsoft" for product "Windows 10 1909" | < 10.0.18363.2274 Search vendor "Microsoft" for product "Windows 10 1909" and version " < 10.0.18363.2274" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 10 20h2 Search vendor "Microsoft" for product "Windows 10 20h2" | < 10.0.19042.1706 Search vendor "Microsoft" for product "Windows 10 20h2" and version " < 10.0.19042.1706" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 10 21h1 Search vendor "Microsoft" for product "Windows 10 21h1" | < 10.0.19043.1706 Search vendor "Microsoft" for product "Windows 10 21h1" and version " < 10.0.19043.1706" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 10 21h2 Search vendor "Microsoft" for product "Windows 10 21h2" | < 10.0.19044.1706 Search vendor "Microsoft" for product "Windows 10 21h2" and version " < 10.0.19044.1706" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 11 21h2 Search vendor "Microsoft" for product "Windows 11 21h2" | < 10.0.22000.1817 Search vendor "Microsoft" for product "Windows 11 21h2" and version " < 10.0.22000.1817" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1" | - | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows Rt 8.1 Search vendor "Microsoft" for product "Windows Rt 8.1" | - | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows Server 2012 Search vendor "Microsoft" for product "Windows Server 2012" | r2 Search vendor "Microsoft" for product "Windows Server 2012" and version "r2" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows Server 2016 Search vendor "Microsoft" for product "Windows Server 2016" | < 10.0.14393.5850 Search vendor "Microsoft" for product "Windows Server 2016" and version " < 10.0.14393.5850" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows Server 2019 Search vendor "Microsoft" for product "Windows Server 2019" | < 10.0.17763.4252 Search vendor "Microsoft" for product "Windows Server 2019" and version " < 10.0.17763.4252" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Windows Server 2022 Search vendor "Microsoft" for product "Windows Server 2022" | < 10.0.20348.1668 Search vendor "Microsoft" for product "Windows Server 2022" and version " < 10.0.20348.1668" | - |
Affected
|