CVE-2025-27740

High

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

secure@microsoft.com·CWE-1390·Published 2025-04-08

CVSS

8.8

EPSS

0.03

KEV

Exploits

cve.orgen

136 chars

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

NVDen

136 chars

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

NVDes

151 chars

La autenticación débil en los Servicios de certificados de Active Directory de Windows permite que un atacante autorizado eleve privilegios en una red.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.8	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	8.8	2.8	5.9