CVE-2025-53779

CVE Enrichment

CVSS: 7.2 HIGH
EPSS: 2.70%
EPSS Percentile: 85.66%
CISA KEV: Not listed

Description

Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: secure@microsoft.com
Published: 13-Aug-2025 01:15
Last Modified: 17-Jun-2026 16:38
EPSS Date: 2026-10-16
CWE: CWE-23

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:H /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

microsoft / windows_server_2025
Version / affected range: * · before (exclusive) 10.0.26100.4851
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*

References

secure@microsoft.com

Last enrichment sync: 17-Oct-2026 08:37
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Microsoft patched this as CVE-2025-53779 by adding KDC-side validation requiring bidirectional links: both msDS-ManagedAccountPrecededByLink on the dMSA and msDS-ManagedAccountSucceededByLink on the target must exist Ouroboros Enables Persistent Credential Extraction from Windows Server 2025 dMSAs

People (3)

MITRE ATT&CK (3)

Vendors (1)

Products (3)

Tools (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.