5478 matches found
CVE-2005-3169
Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized...
CVE-2002-2328
Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service hang via an LDAP client that sets the page length to zero during a large request...
BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory
Akamai researchers found a privilege escalation vulnerability in Windows Server 2025 that allows attackers to compromise any user in Active Directory...
BadSuccessor: dMSA abuse to Escalate Privileges in Windows Active Directory
This module exploits 'Bad Successor', which allows operators to elevate privileges on domain controllers running at the Windows 2025 forest functional level. Microsoft decided to introduce Delegated Managed Service Accounts in this forest level and they came ripe for exploitation. Normal users...
When Elastic layers are assigned to VDAs they may fail to attach if VDA's are launched from shutdown
Elastic layers intermittently fail to attach during session launch. Layers are assigned to VDAs not users Ulayersvc logs show the different group membership is determined during each launch Working: ActiveDirectoryInfoService: Machine Group SIDs: test\Domain Computers, test\group1, test\group2...
Co-Evolutionary Defence of Active Directory Attack Graphs Via GNN-Approximated Dynamic Programming
Modern enterprise networks increasingly rely on Active Directory AD for identity and access management. However, this centralization exposes a single point of failure, allowing adversaries to compromise high-value assets. Existing AD defense approaches often assume static attacker behavior, but...
CVE-2025-29968
Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...
Active Directory Certificate Services DoS
The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and utilization of certificates on Windows operating systems, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of a security measure - Execution of arbitrary code root/admin privileges - Execution...
CVE-2025-29968
Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...
CVE-2025-29968 Active Directory Certificate Services (AD CS) Denial of Service Vulnerability
...
CVE-2025-29968 Active Directory Certificate Services (AD CS) Denial of Service Vulnerability
...
CVE-2025-29968
Technical details (affected product/versions, root cause, impact, exploit info, and fixes) are not provided in the connected documents. Based on the supplied sources, only the basic description and CVSS metrics are available. Monitor for updates.
Active Directory Certificate Services (AD CS) Denial of Service Vulnerability
Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...
PT-2025-20940 · Microsoft · Defender For Identity
Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Identity affected versions not specified Description: The issue is related to improper authentication in Microsoft Defender for Identity, allowing an unauthorized attacker to perform spoofing over an adjacent network...
Microsoft Active Directory Certificate Services 输入验证错误漏洞
Microsoft Active Directory Certificate Services is a Windows Server role that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Active...
PT-2025-20971 · Microsoft · Active Directory Certificate Services +1
Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to deny service over a network. This can affect the system, leadin...
CVE-2025-29968: Improper Input Validation
Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization
Threat actors with links to the Play ransomware family exploited a recently patched security flaw in Microsoft Windows as a zero-day as part of an attack targeting an unnamed organization in the United States. The attack, per the Symantec Threat Hunter Team, part of Broadcom, leveraged...
Adaptive Wizard for Removing Cross-Tier Misconfigurations in Active Directory
Security vulnerabilities in Windows Active Directory AD systems are typically modeled using an attack graph and hardening AD systems involves an iterative workflow: security teams propose an edge to remove, and IT operations teams manually review these fixes before implementing the removal. As...