ZeroDay Findings
Sign inSign up

Findings

CVE-2022-26923

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Published May 10, 2022 · updated Jun 16, 2026 · microsoft windows 10 1507

An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 10, 2022 · Catalog

    Detected

    An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

  2. Aug 18, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Sep 8, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

Required action

Apply updates per vendor instructions.

CISA due date Sep 8, 2022

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 1909version unspecified
  • cpe microsoft/windows 10 20h2version unspecified
  • cpe microsoft/windows 10 21h1version unspecified
  • cpe microsoft/windows 10 21h2version unspecified
  • cpe microsoft/windows 11 21h2version unspecified
  • vendor Microsoft Active Directoryversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2022-26923

    An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2022-26923

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2022-26923

    30-day exploitation probability 83.5%

    first.org
  • Metasploit ModulesPublic exploit moduleauxiliary_admin/dcerpc/cve_2022_26923_certifried

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDVulnerability recordCVE-2022-26923

    Active Directory Domain Services Elevation of Privilege Vulnerability

    nvd.nist.gov

References