⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2021-42287

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

noPac: Any domain user becomes Domain Controller machine account in seconds — full domain admin in ~30 seconds. Apply November 2021 patches. This is Zerologon-level severity for unpatched environments. Monitor for unusual machine account name changes in AD.

📋 Official Description

Active Directory Domain Services Elevation of Privilege Vulnerability allows domain users to escalate to domain controller machine account, enabling full domain compromise. noPac.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →