Privilege Escalation Vulnerability in Windows Active Directory Certificate Services by Microsoft
CVE-2025-27740
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 April 2025
Badges
What is CVE-2025-27740?
A vulnerability exists in Microsoft Windows Active Directory Certificate Services that allows an authorized attacker to gain elevated privileges within a network. This weakness can be exploited, potentially giving malicious actors the ability to perform unauthorized actions and access sensitive information, thereby compromising the security of the entire network infrastructure.
Affected Version(s)
Windows Server 2008 R2 Service Pack 1 (Server Core installation) x64-based Systems 6.1.7601.0 < 6.1.7601.27670
Windows Server 2008 R2 Service Pack 1 x64-based Systems 6.1.7601.0 < 6.1.7601.27670
Windows Server 2008 Service Pack 2 (Server Core installation) 32-bit Systems 6.0.6003.0 < 6.0.6003.23220
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.