CVE coverage
View on NVD →
CVE-2021-42287
CVSS 7.5
Actively exploited (KEV)
7 detections found
Active Directory Domain Services Elevation of Privilege Vulnerability
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Privileged Escalation via SamAccountName Spoofing | production | 2026-09-18 |
| splunk | Suspicious Computer Account Name Change | production | 2026-05-13 |
| splunk | Suspicious Kerberos Service Ticket Request | production | 2026-05-13 |
| splunk | Suspicious Ticket Granting Ticket Request | production | 2026-05-13 |
| sigma | Potential CVE-2021-42287 Exploitation Attempt | test | 2023-04-14 |
| sigma | Win Susp Computer Name Containing Samtheadmin | test | 2023-01-04 |
| sigma | Suspicious Computer Account Name Change CVE-2021-42287 | test | 2022-12-25 |