Active Directory Certificate Services Elevation of Privilege Vulnerability

A flaw in Windows Active Directory Certificate Services allows an authenticated user to gain higher privileges on the system. An attacker who already has access to a user account can exploit this to obtain administrative rights.

An elevation of privilege vulnerability exists in AD CS where an authenticated attacker can bypass access controls through improper privilege validation. The attack requires valid credentials and affects the certificate issuance process, potentially granting SYSTEM-level privileges.