Sploitus

CVE-2022-26923

8 known exploits for CVE-2022-26923

Active Directory Domain Services Elevation of Privilege Vulnerability

Affected products
Active Directory Domain Services, Windows Active Directory Certificate Services, Windows
Microsoft Windows 10 1507
< 10.0.10240.19297
Microsoft Windows 10 1607
< 10.0.14393.5850
Microsoft Windows 10 1809
< 10.0.17763.4252
Microsoft Windows 10 1909
< 10.0.18363.2274
Microsoft Windows 10 20h2
< 10.0.19042.1706
Microsoft Windows 10 21h1
< 10.0.19043.1706
CVSS 2.0
9.0 HIGH
CVSS 3.1
8.8 HIGH
EPSS
83.0% (100th percentile)
Weakness
CWE-295
NVD status
Analyzed
Published
2022-05-10
CVE-2022-26923 at NVD
Authoritative description, scoring and affected products

8 known exploits for CVE-2022-26923

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Improper Certificate Validation in Microsoft
2026-05-21 victorhugomierezGITHUB
Exploit for Improper Certificate Validation in Microsoft
2026-02-21 EliasdekiniweekGITHUB
Active Directory Certificate Services (ADCS) Privilege Escalation (Certifried)
2024-08-31 Christophe de la Fuente, Erik Wynter, Oliver Lyak, CravateRouge, metasploit.comPACKETSTORMRuby
Exploit for Improper Certificate Validation in Microsoft
2023-10-17 evilashzGITHUB
Active Directory Certificate Services (ADCS) privilege escalation (Certifried)
2023-01-27 Oliver Lyak, CravateRouge, Erik Wynter, Christophe De La FuenteMETASPLOITRuby
Exploit for Improper Certificate Validation in Microsoft
2022-08-17 lsecqtGITHUB
Exploit for Improper Certificate Validation in Microsoft
2022-05-14 LudovicPathoGITHUB
Exploit for Improper Certificate Validation in Microsoft
2022-05-14 LudovicPathoGITHUB