CVE-2021-42291: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20174Patch KB5007255 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.23517Patch KB5007245 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.25769Patch KB5007233 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.21282Patch KB5007246 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.4770Patch KB5007192 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1348Patch KB5007186 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.350Patch KB5007205 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2300Patch KB5007206
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42291?
CVE-2021-42291 is classified as an Elevation of Privilege vulnerability, allowing attackers with network access to elevate their privileges.
How do I fix CVE-2021-42291?
To address CVE-2021-42291, Microsoft recommends applying the latest security updates for affected Windows Server versions.
Which software is affected by CVE-2021-42291?
CVE-2021-42291 affects multiple versions of Microsoft Windows Server, including 2022, 2019, 2016, 2012 R2, and 2008 SP2.
What are the potential consequences of ignoring CVE-2021-42291?
Ignoring CVE-2021-42291 can lead to unauthorized access and compromise of sensitive data within the Active Directory domain.
How can I determine if my system is vulnerable to CVE-2021-42291?
You can determine if your system is vulnerable to CVE-2021-42291 by checking if it is one of the affected Windows Server versions and whether the latest updates have been applied.