CVE-2025-21293
HIGHWindows 10 1507-24H2 and Windows Server 2012-2016 - Active Directory Domain Services Elevation of Privilege
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-21293.
PoCs published by ahmedumarehman, scriptjunkie, Spencer McIntyre, itm4n, including Metasploit module exploits/windows/local/service_permissions.
AI-analyzed exploit summary This repository contains a README describing CVE-2025-21293, an elevation of privilege vulnerability in Active Directory Domain Services affecting Windows 10, 11, and Server. The vulnerability allows 'Network Configuration Operators' to execute code with SYSTEM privileges via Windows Performance Counters.
Description
Active Directory Domain Services Elevation of Privilege Vulnerability
Exploits (2)
This repository contains a README describing CVE-2025-21293, an elevation of privilege vulnerability in Active Directory Domain Services affecting Windows 10, 11, and Server. The vulnerability allows 'Network Configuration Operators' to execute code with SYSTEM privileges via Windows Performance Counters.
This Metasploit module exploits weak service permissions in Windows to escalate privileges to SYSTEM by either creating a new service, modifying an existing service's configuration, or hijacking a service's executable or registry permissions. It includes multiple techniques such as service creation, file permission manipulation, and registry key modification to achieve local privilege escalation.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H