CVE-2026-25177: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
Other sources
Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25177?
CVE-2026-25177 has a severity rating of critical due to the potential for privilege escalation in Active Directory.
How do I fix CVE-2026-25177?
To fix CVE-2026-25177, apply the security patches provided by Microsoft for the affected Windows versions.
Which products are affected by CVE-2026-25177?
CVE-2026-25177 affects multiple versions of Windows 10, Windows 11, and several Windows Server editions.
What type of vulnerability is CVE-2026-25177?
CVE-2026-25177 is classified as an elevation of privilege vulnerability in Active Directory.
Can CVE-2026-25177 be exploited remotely?
Yes, CVE-2026-25177 can potentially be exploited by an authorized attacker to elevate privileges over a network.