Description
Active Directory Domain Services Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0 – < 10.0.17763.4252, 10.0.0 – < 10.0.17763.4252 | 10.0.17763.4252 |
| Microsoft | Windows Server 2019 | 10.0.17763.0 – < 10.0.17763.4252 | 10.0.17763.4252 |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 – < 10.0.17763.4252 | 10.0.17763.4252 |
| Microsoft | Windows 10 Version 1909 | 10.0.0 – < 10.0.18363.2274 | 10.0.18363.2274 |
| Microsoft | Windows 10 Version 21H1 | 10.0.0 – < 10.0.19043.1706 | 10.0.19043.1706 |
| Microsoft | Windows Server 2022 | 10.0.20348.0 – < 10.0.20348.1668 | 10.0.20348.1668 |
| Microsoft | Windows 10 Version 20H2 | 10.0.0 – < 10.0.19042.1706 | 10.0.19042.1706 |
| Microsoft | Windows Server version 20H2 | 10.0.0 – < 10.0.19042.1706 | 10.0.19042.1706 |
| Microsoft | Windows 11 version 21H2 | 10.0.0 – < 10.0.22000.1817 | 10.0.22000.1817 |
| Microsoft | Windows 10 Version 21H2 | 10.0.19043.0 – < 10.0.19043.1706 | 10.0.19043.1706 |
| Microsoft | Windows 10 Version 1507 | 10.0.10240.0 – < 10.0.10240.19297 | 10.0.10240.19297 |
| Microsoft | Windows 10 Version 1607 | 10.0.14393.0 – < 10.0.14393.5850 | 10.0.14393.5850 |
| Microsoft | Windows Server 2016 | 10.0.14393.0 – < 10.0.14393.5850 | 10.0.14393.5850 |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0 – < 10.0.14393.5850 | 10.0.14393.5850 |
| Microsoft | Windows 8.1 | 6.3.0 – < 6.3.9600.20371 | 6.3.9600.20371 |
| Microsoft | Windows Server 2012 R2 | 6.3.9600.0 – < 6.3.9600.20919 | 6.3.9600.20919 |
| Microsoft | Windows Server 2012 R2 (Server Core installation) | 6.3.9600.0 – < 6.3.9600.20919 | 6.3.9600.20919 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Active Directory Certificate Services (ADCS) privilege escalation (Certifried)
auxiliary/admin/dcerpc/cve_2022_26923_certifried
GitHub 9 repositories
-
evilashz/PIGADVulnScanner ★ 81 · Oct 17, 2023
检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare
-
LudovicPatho/CVE-2022-26923_AD-Certificate-Services ★ 41 · May 14, 2022
The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services (AD CS) server …
-
lsecqt/CVE-2022-26923-Powershell-POC ★ 17 · Aug 17, 2022
A powershell poc to load and automatically run Certify and Rubeus from memory.
-
r1skkam/TryHackMe-CVE-2022-26923 ★ 6 · May 12, 2022
Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services
-
Gh-Badr/CVE-2022-26923 ★ 2 · Nov 28, 2023
A proof of concept exploiting CVE-2022-26923.
-
Eliasdekiniweek/CVE-2022-26923 ★ 1 · Feb 21, 2026
Exploitation de CVE-2022-26923
-
Nefhara/CVE-2022-26923 ★ 0 · May 29, 2026
Automated CVE-2022-26923 Exploitation (Certifried)
-
rayngnpc/CVE-2022-26923-rayng ★ 0 · Mar 4, 2025
Exploitation for CVE-2022-26923
-
Yowise/CVE-2022-26923 ★ 0 · Sep 1, 2024
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- MSRC-CVE-2022-26923 Active Directory Domain Services Elevation of Privilege Vulnerability Microsoft Security Response Center · Apr 11, 2023