CVE-2024-49019High· 7.8▾ MidnightPoC availableActive Directory Certificate Services Elevation of Privilege Vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.4 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.0%
1 GitHub repo (last check)
Active Directory Certificate Services Elevation of Privilege Vulnerability
windows_server_2008windows_server_2008 = r2windows_server_2012windows_server_2012 = r2windows_server_2016 < 10.0.14393.7515windows_server_2019 < 10.0.17763.6532windows_server_2022 < 10.0.20348.2849windows_server_2022_23h2 < 10.0.25398.1251windows_server_2025 < 10.0.26100.2314Upgrade past the affected range:
windows_server_2016 10.0.14393.7515windows_server_2019 10.0.17763.6532windows_server_2022 10.0.20348.2849windows_server_2022_23h2 10.0.25398.1251windows_server_2025 10.0.26100.2314Connected by shared product, vendor, weakness, or advisory.
CVE-2026-96940High· 8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-55040Critical· 9.1Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2026-88101High· 7.8Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CVE-2026-85939Medium· 5.3Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
CVE-2026-85922High· 7.4Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-85376High· 7.8Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.