Unpatched Windows Server Flaw Threatens Active Directory Users

A newly discovered vulnerability in a new type of service account present in Active Directory, called delegated Managed Service Account (dMSA), allows attackers to escalate privileges and assume the permissions of any Active Directory (AD) user. The flaw has not yet been patched by Microsoft.