CVE coverage
View on NVD →
CVE-2021-42278
CVSS 7.5
Actively exploited (KEV)
6 detections found
Active Directory Domain Services Elevation of Privilege Vulnerability
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Privileged Escalation via SamAccountName Spoofing | production | 2026-09-18 |
| splunk | Suspicious Computer Account Name Change | production | 2026-05-13 |
| splunk | Suspicious Kerberos Service Ticket Request | production | 2026-05-13 |
| splunk | Suspicious Ticket Granting Ticket Request | production | 2026-05-13 |
| sigma | Potential CVE-2021-42278 Exploitation Attempt | test | 2023-04-14 |
| sigma | Win Susp Computer Name Containing Samtheadmin | test | 2023-01-04 |