How severe is CVE-2022-26923?

CVE-2022-26923 has a CVSS 3.1 base score of 8.8 (HIGH). EPSS estimates a 83.5% probability of exploitation in the next 30 days. It is listed in the CISA Known Exploited Vulnerabilities catalog.

Certifried (CVE-2022-26923): Active Directory Domain Services

Q: What is Certifried?

Certifried is the common name for CVE-2022-26923. Certifried is an Active Directory Certificate Services (AD CS) privilege escalation flaw discovered by Oliver Lyak and patched by Microsoft in May 2022. A domain user can obtain a certificate that maps to a more privileged computer account.

CISA Known Exploited Vulnerabilities

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV

2022-08-18

Remediation due

2022-09-08

Required action
Apply updates per vendor instructions.

CISA notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26923; https://nvd.nist.gov/vuln/detail/CVE-2022-26923

Also Known as Certifried

Certifried is an Active Directory Certificate Services (AD CS) privilege escalation flaw discovered by Oliver Lyak and patched by Microsoft in May 2022. A domain user can obtain a certificate that maps to a more privileged computer account.

Name sources

Description

Active Directory Domain Services Elevation of Privilege Vulnerability

Severity

CVSS 3.1 · CNA8.8 HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC · CISA-ADP

Exploitationactive

Automatableno

Technical impacttotal

Affected Products

Vendor	Product	Affected versions
Microsoft	Windows 10 Version 1809	10.0.17763.0 to <10.0.17763.4252
Microsoft	Windows 10 Version 1809	10.0.0 to <10.0.17763.4252
Microsoft	Windows Server 2019	10.0.17763.0 to <10.0.17763.4252
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 to <10.0.17763.4252
Microsoft	Windows 10 Version 1909	10.0.0 to <10.0.18363.2274
Microsoft	Windows 10 Version 21H1	10.0.0 to <10.0.19043.1706
Microsoft	Windows Server 2022	10.0.20348.0 to <10.0.20348.1668
Microsoft	Windows 10 Version 20H2	10.0.0 to <10.0.19042.1706
Microsoft	Windows Server version 20H2	10.0.0 to <10.0.19042.1706
Microsoft	Windows 11 version 21H2	10.0.0 to <10.0.22000.1817
Microsoft	Windows 10 Version 21H2	10.0.19043.0 to <10.0.19043.1706
Microsoft	Windows 10 Version 1507	10.0.10240.0 to <10.0.10240.19297
Microsoft	Windows 10 Version 1607	10.0.14393.0 to <10.0.14393.5850
Microsoft	Windows Server 2016	10.0.14393.0 to <10.0.14393.5850
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 to <10.0.14393.5850
Microsoft	Windows 8.1	6.3.0 to <6.3.9600.20371
Microsoft	Windows Server 2012 R2	6.3.9600.0 to <6.3.9600.20919
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 to <6.3.9600.20919

References

2 Links

Vendor advisories

Active Directory Domain Services Elevation of Privilege Vulnerability

Other references

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26923

Record Details

Published

2022-05-10

Last updated

2025-10-21

Assigner (CNA)

microsoft

Credited to

More from Microsoft

All Microsoft CVEs→

CVE-2021-422877.5 HIGH

Active Directory Domain Services Elevation of Privilege Vulnerability

MicrosoftKEVEPSS 77.2%2021-11-10

CVE-2021-422787.5 HIGH

Active Directory Domain Services Elevation of Privilege Vulnerability

MicrosoftKEVEPSS 73.3%2021-11-10

CVE-2015-16359.8 CRITICAL

Microsoft HTTP.sys Remote Code Execution Vulnerability

KEVEPSS 100.0%2015-04-14

CVE-2019-07089.8 CRITICAL

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

MicrosoftKEVEPSS 100.0%2019-05-16

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.