CVE-2026-54121
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
An improper authorization vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Risk Assessment
The organization faces the risk of privilege escalation by an authorized user, potentially leading to domain compromise and data confidentiality breaches.
Recommendation
Apply the security update provided by Microsoft for AD CS immediately and review certificate permission configurations.
Other vulnerabilities in Active Directory Certificate Services
See all- CVE-2026-83666High
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69624Medium
An incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
- CVE-2026-69395Medium
The vulnerability in Active Directory Certificate Services (AD CS) involves the use of an externally-controlled format string. This allows an authorized attacker to disclose information over a network.
- CVE-2026-62810High
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-62818High
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS