CVE-2026-83666
7.0HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-362
Impact
A local authenticated attacker can elevate privileges to system or domain level on the host running Active Directory Certificate Services. They need local shell or execution access on the AD CS server to exploit the timing window.
Root cause
A race condition from improper synchronization over a shared resource within Active Directory Certificate Services allows unauthorized state changes.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the official Microsoft security update for your Windows Server version from the MSRC advisory; if you cannot patch immediately, restrict local logon permissions on the AD CS server to trusted administrators.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.