Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2022-26923

Active Directory Domain Services Elevation of Privilege Vulnerability

Published: May 10, 2022
Updated: Nov 4, 2025
CVE: CVE-2022-26923
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 9
AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

CWE-295

OWASP TOP 10:

A3 - Sensitive Data Exposure

Affected Software
References

Software	From	Fixed in
microsoft / windows_server_2012	r2	r2.x
microsoft / windows_10_1909	-	10.0.18363.2274
microsoft / windows_10_21h1	-	10.0.19043.1706
microsoft / windows_10_20h2	-	10.0.19042.1706
microsoft / windows_10_21h2	-	10.0.19044.1706
microsoft / windows_11_21h2	-	10.0.22000.1817
microsoft / windows_10_1809	-	10.0.17763.4252
microsoft / windows_10_1607	-	10.0.14393.5850
microsoft / windows_server_2022	-	10.0.20348.1668
microsoft / windows_10_1507	-	10.0.10240.19297
microsoft / windows_server_2016	-	10.0.14393.5850
microsoft / windows_server_2019	-	10.0.17763.4252

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime