← Database

CVE-2025-27740

HIGH CVSS: 8.8 Published: 2025-04-08 Modified: 2026-06-17

Description

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2008Microsoft Windows Server 2022Microsoft Windows Server 2012Microsoft Windows Server 2025Microsoft Windows Server 2022 23H2

Weakness Type

CWE-1390

References