Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
CVE-2025-27740 Active Directory Certificate Services Elevation of Privilege Vulnerability
Published April 8, 2025