CVE-2024-49019: high-severity vulnerability in Microsoft Windows Server 2008 R2 Service Pack 1
Active Directory Certificate Services Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in Windows Active Directory Certificate Services allows an authenticated user to gain higher privileges on the system. An attacker who already has access to a user account can exploit this to obtain administrative rights.
An elevation of privilege vulnerability exists in AD CS where an authenticated attacker can bypass access controls through improper privilege validation. The attack requires valid credentials and affects the certificate issuance process, potentially granting SYSTEM-level privileges.
In the same product, most dangerous first.