Active Directory Certificate Services Elevation of Privilege Vulnerability

An authenticated attacker on your network could exploit this flaw to escalate from a standard user account to higher privileges on systems running AD CS, potentially gaining administrative access to your directory infrastructure and compromised endpoints.

Organizations running Windows Server 2016, 2019, 2022, or 2025 with Active Directory Certificate Services enabled, as well as Windows 10 systems that are part of an Active Directory domain. This affects any utility or municipality with an internal Windows-based IT infrastructure managing domain identity and certificate services.

An attacker with valid domain credentials and network access to a Windows Server running Active Directory Certificate Services could send a specially crafted request over the network to trigger improper authorization checks. This would allow them to escalate their privilege level without requiring administrative credentials or user interaction.