Summary
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What could an attacker achieve by exploiting this vulnerability?
An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
The attacker must be authenticated to be able to exploit this vulnerability.
Security updates
10.0.17763.9245 — https://support.microsoft.com/help/5122876
10.0.20348.5622 — https://support.microsoft.com/help/5122882
10.0.26100.33438 — https://support.microsoft.com/help/5122871
10.0.14393.9512 — https://support.microsoft.com/help/5123099
6.2.9200.26349 — https://support.microsoft.com/help/5123065
6.3.9600.23398 — https://support.microsoft.com/help/5123066
Vulnerabilities 1
-
Medium 6.5
Active Directory Certificate Services (AD CS) Tampering Vulnerability
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-69624 Active Directory Certificate Services (AD CS) Tampering Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69624
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss