cbcvebase.
CVE-2025-29968
published 2025-05-13

CVE-2025-29968: Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

Affected

24 ranges
VendorProductVersion rangeFixed in
microsoftwindows_server_2008
microsoftwindows_server_2008_r2_service_pack_1>= 6.1.7601.0 < 6.1.7601.277296.1.7601.27729
microsoftwindows_server_2008_service_pack_2>= 6.0.6003.0 < 6.0.6003.232796.0.6003.23279
microsoftwindows_server_2012
microsoftwindows_server_2012>= 6.2.9200.0 < 6.2.9200.254756.2.9200.25475
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.225776.3.9600.22577
microsoftwindows_server_2016< 10.0.14393.806610.0.14393.8066
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.806610.0.14393.8066
microsoftwindows_server_2019< 10.0.17763.731410.0.17763.7314
microsoftwindows_server_2019>= 10.0.17763.0 < 10.0.17763.731410.0.17763.7314
microsoftwindows_server_2022< 10.0.20348.369210.0.20348.3692
microsoftwindows_server_2022>= 10.0.20348.0 < 10.0.20348.369210.0.20348.3692
microsoftwindows_server_2022_23h2< 10.0.25398.161110.0.25398.1611
msrccbl2_kernel_5.15.37.1-2_on_cbl_mariner_2.0
msrccm1_kernel_5.10.117.1-2_on_cbl_mariner_1.0
msrcwindows_server_2008_for_32-bit_systems_service_pack_2
msrcwindows_server_2008_for_x64-based_systems_service_pack_2
msrcwindows_server_2008_r2_for_x64-based_systems_service_pack_1
msrcwindows_server_2012
msrcwindows_server_2012_r2
msrcwindows_server_2016
msrcwindows_server_2019
msrcwindows_server_2022
msrcwindows_server_2022_23h2_edition