Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2021-42278

Your trail

Where next?

Selected cve

CVE-2021-42278

Active Directory Domain Services Elevation of Privilege Vulnerability

24 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority75.9–87.8

Coverage85.0%

Connections22

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 22

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2022

b9713c8a-c489-41f2-a327-580fba3e6c21

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server version 2004

801047fc-42e8-4e85-a9d6-ade8a8ddb122

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2016

bed8037d-b4b1-4d3e-81b9-5d6a3fb8bbd7

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

f7ebb15f-cff1-4cf9-a4f0-113cddb1d5c3

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2008 R2 Service Pack 1

f3926cd7-db80-4584-9638-b921df776141

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2012

a571d030-4fc6-4d61-958d-d935e41375d9

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2008 Service Pack 2

658f2463-3dfa-4b96-a9d3-d9b087ceb41a

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2012 (Server Core installation)

376aed4c-4fb3-49f3-a6d0-15035c307c58

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server version 20H2

557abebd-6ca9-49b6-8c51-b12016c7ac81

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2016 (Server Core installation)

f21c7a9f-2aee-470c-b9b4-33de61f73a89

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2012 R2 (Server Core installation)

bc1447c6-4ee6-4c6c-b9d6-144b5aa68b22

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

ebe540c8-88d0-441f-8b25-ddebc6c144dc

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2019

69354d54-85aa-4b77-96b2-3e8d4b8b8320

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2012 R2

cdbd968e-72e6-4235-8972-f92fe3a92aca

has cited scope1 retained · stored CVE-2021-42278 → Microsoft · Windows Server 2019 (Server Core installation)

75f12d96-58ce-4c22-9258-e8a3c80cf3c1

has vulnerable target scope1 retained · stored CVE-2021-42278 → microsoft · windows_server_2016

277f0bbc-a02f-454d-b9a5-adbbc0dbf7e9

has vulnerable target scope2 retained · stored CVE-2021-42278 → microsoft · windows_server_2008

34cbbe35-db17-42e0-8dc0-5b5ac9db1ef293200da8-304a-4db6-a419-2341b73964e3

has vulnerable target scope1 retained · stored CVE-2021-42278 → microsoft · windows_server_2019

eecbe85e-9e39-4397-86af-b9e6e568b2ec

has vulnerable target scope1 retained · stored CVE-2021-42278 → microsoft · windows_server_20h2

44814cee-5bb7-4953-af77-aa3d9674ee23

has vulnerable target scope1 retained · stored CVE-2021-42278 → microsoft · windows_server_2004

1297d938-5676-44c7-8094-fb2484f107c6

has vulnerable target scope2 retained · stored CVE-2021-42278 → microsoft · windows_server_2012

04136fe3-c10c-4475-912e-df92fdbb6ae711a0099d-4116-4d6d-8868-3f4353bc5743

has vulnerable target scope1 retained · stored CVE-2021-42278 → microsoft · windows_server_2022

675be03d-3773-4e8a-a5e2-22e020f4c0f7

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 23 entities · 22 relationships · bounded complete