CVE-2025-29968

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

History

19 May 2025, 14:21

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Microsoft
Microsoft windows Server 2016
Microsoft windows Server 2022 23h2
Microsoft windows Server 2019
Microsoft windows Server 2012
Microsoft windows Server 2022
Microsoft windows Server 2008
CPE cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29968 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29968 - Vendor Advisory

13 May 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-13 17:15

Updated : 2025-05-19 14:21


NVD link : CVE-2025-29968

Mitre link : CVE-2025-29968


JSON object : View

Products Affected

microsoft

  • windows_server_2022_23h2
  • windows_server_2008
  • windows_server_2022
  • windows_server_2016
  • windows_server_2012
  • windows_server_2019
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo