NetSight
medium6.5

CVE-2025-29968

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

Impact

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows Server 2008
All versions
Version r2
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
before 10.0.14393.8066
MicrosoftWindows Server 2019
before 10.0.17763.7314
MicrosoftWindows Server 2022
before 10.0.20348.3692
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1611

Weakness classification

References