Active Directory Domain Services Elevation of Privilege Vulnerability

How could an attacker exploit this vulnerability?
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow elevation of privilege to System.

Where can I find out more information about this vulnerability?
Please see Certificate-based authentication changes on Windows domain controllers for more information and ways to protect yourself.

Security updates
10.0.17763.3287 — https://support.microsoft.com/help/5016623
10.0.19043.1889 — https://support.microsoft.com/help/5016616
10.0.20348.887 — https://support.microsoft.com/help/5016627
10.0.22000.856 — https://support.microsoft.com/help/5016629
10.0.10240.19387 — https://support.microsoft.com/help/5016639
10.0.14393.5291 — https://support.microsoft.com/help/5016622
6.1.7601.26065 — https://support.microsoft.com/help/5016676
6.1.7601.26065 — https://support.microsoft.com/help/5016679
6.3.9600.20520 — https://support.microsoft.com/help/5016681
6.3.9600.20520 — https://support.microsoft.com/help/5016683
6.0.6003.21616 — https://support.microsoft.com/help/5016669
6.0.6003.21616 — https://support.microsoft.com/help/5016686
6.2.9200.23817 — https://support.microsoft.com/help/5016672
6.2.9200.23817 — https://support.microsoft.com/help/5016684