Active Directory Certificate Services vulnerabilities

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

An incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.

The vulnerability in Active Directory Certificate Services (AD CS) involves the use of an externally-controlled format string. This allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.

An improper authorization vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.