返回 CVE 浏览器

CVE-2021-42278

🔥 Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score91.7120%

EPSS Percentile91.67th

Published2021-11-10

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Active Directory Domain Services Elevation of Privilege Vulnerability

Affected Platforms (CPE)

💻

Microsoft

Windows Server 2004

< 10.0.19041.1348

💻

Microsoft

Windows Server 2008

All versions= r2

💻

Microsoft

Windows Server 2012

All versions= r2

💻

Microsoft

Windows Server 2016

< 10.0.14393.4770

References & Advisories

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42278

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42278

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42278

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 29 日

本期威胁情报聚焦遭活跃利用的 Arista VeloCloud CVE-2026-16812、JetBrains TeamCity CVE-2026-63077 未经身份验证 RCE、公开 IPMI／BMC 的 RAKP 密码风险，以及 Origin Energy 与 MCBS 数据泄露更新。

每日全球网络威胁情报摘要｜2026 年 7 月 28 日

本期威胁情报聚焦 Certighost CVE-2026-54121 的 AD CS 域接管攻击链、vBulletin CVE-2026-61511 预身份认证 RCE、Dysphoria 僵尸网络扩张，以及 DentaQuest 与 Fairlife 数据泄露及勒索事件。

每日全球网络威胁情报摘要｜2026 年 7 月 22 日

本期摘要重点分析本地部署 Microsoft SharePoint 服务器正遭主动利用之 CVE-2026-50522 漏洞、Qilin 勒索软件利用 PAN-OS CVE-2026-0257 身份验证绕过入侵企业 VPN，以及 Cisco 安全设备与关键基础设施修补处置指南。

相关漏洞威胁

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-542496.8

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 t...

Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_manager_getUserl...

CVE-2026-674356.0

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0....