Yüksek CISA KEV
CVE-2022-26923: Microsoft Active Directory: aktif olarak istismar edilen açık
Açıklama (NVD)
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.
Özet bilgiler
- EPSS
- %83,50 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2022-08-18 · Son tarih: 2022-09-08
Gerekli aksiyon: Apply updates per vendor instructions.