CVE-2026-69624: Active Directory Certificate Services (AD CS) Tampering Vulnerability
Active Directory Certificate Services (AD CS) Tampering Vulnerability
Other sources
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9512Patch KB5123099 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5622Patch KB5122882 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23397Patch KB5123066 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26349Patch KB5123065 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9245Patch KB5122876 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33438Patch KB5122871
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must already be authorized and able to reach the affected AD CS deployment over the network. The available data does not indicate that unauthenticated attackers can exploit it.
What is the likely security impact?
Successful exploitation allows tampering and has an integrity impact. The provided vector does not identify a confidentiality or availability impact.
Which systems should be reviewed?
Review AD CS deployments associated with the listed Windows 10 and Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 platforms. The data does not specify affected builds, configurations, or whether AD CS is enabled by default.