Skip to content
OpenAdvisories
Critical 1 exploited CVE MSRC-CVE-2022-26923 1 CVE

Active Directory Domain Services Elevation of Privilege Vulnerability

Published May 10, 2022 · Updated Apr 11, 2023 · Revision 4

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow elevation of privilege to System.

Where can I find out more information about this vulnerability?
Please see Certificate-based authentication changes on Windows domain controllers for more information and ways to protect yourself.

Security updates
10.0.17763.4252 — https://support.microsoft.com/help/5025229
10.0.18363.2274 — https://support.microsoft.com/help/5013945
10.0.19043.1706 — https://support.microsoft.com/help/5013942
10.0.20348.1668 — https://support.microsoft.com/help/5025230
10.0.22000.1817 — https://support.microsoft.com/help/5025224
10.0.10240.19297 — https://support.microsoft.com/help/5013963
10.0.14393.5850 — https://support.microsoft.com/help/5025228
6.3.9600.20371 — https://support.microsoft.com/help/5014011
6.3.9600.20365 — https://support.microsoft.com/help/5014001
6.3.9600.20367 — https://support.microsoft.com/help/5014025
6.3.9600.20919 — https://support.microsoft.com/help/5025285
6.3.9600.20919 — https://support.microsoft.com/help/5025288

Vulnerabilities 1

Revision history

  1. #4

    Microsoft is announcing the release of the second phase of Windows security updates to address this vulnerability. The April 2023 updates remove the Disabled mode so that you can no longer place domain controllers in Disabled mode using a registry key setting. Please see [Certificate-based authentication changes on Windows domain controllers](https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16) for more information and ways to protect yourself.

  2. #3

    Acknowledgement added. This is an informational change only.

  3. #1

    Information published.

  4. #2

    Added an FAQ. This is an information change only.

References