---
id: 5969
title: "3 Steps to Mitigating Two Recent Active Directory Domain Service Privilege Escalation Security Flaws"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/mitigating-active-directory-domain-service-privilege-escalation-security-flaws/"
published_at: "2021-12-23T15:52:06Z"
tags: ["active-directory", "privilege-escalation", "mitigation", "cve-2021-42278", "cve-2021-42287"]
phying_url: "https://phying.com/item/5969"
lang: en
---

# 3 Steps to Mitigating Two Recent Active Directory Domain Service Privilege Escalation Security Flaws

## Summary

Following Microsoft's December 2021 alert on AD DS privilege escalation flaws CVE-2021-42278 and CVE-2021-42287, three defensive steps beyond patching help prevent unauthorized account creation that can lead to domain compromise.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2021-12-23T15:52:06Z
- **Original:** https://www.semperis.com/blog/mitigating-active-directory-domain-service-privilege-escalation-security-flaws/
- **Phying News:** https://phying.com/item/5969