ahmedumarehman/CVE-2025-21293

PoC

CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsoft patched this in January 2025. Apply updates to mitigate risks.

view exploit source poc_in_githubauthor ahmedumarehmanpublished 2025-03-10catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-21293US	—	15.0% (97th)	Exploit	2025-01-14
Active Directory Domain Services Elevation of Privilege Vulnerability

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan