Product
Active Directory Domain Services
- First Reported
- Jun 15, 2026
- Latest Reported
- Nov 10, 2026
Reported Context (2)
- Identity platform components face elevated risk this month with Critical flaws in both Lightweight Directory Access Protocol (LDAP) and Active Directory Domain Services (AD DS). Microsoft's November 2026 Patch Tuesday Fixes 1,252 Vulnerabilities, Including Exploited Outlook Zero-Day
- CVE-2026-25177 is a high-severity privilege escalation flaw in Microsoft Active Directory Domain Services that can let an authenticated domain user gain broader access through SPN manipulation and Kerberos abuse. CVE-2026-25177: Active Directory Flaw Can Enable Privilege Escalation Through SPN Abuse
CVE (16)
MITRE ATT&CK (8)
Vendors (2)
Products (13)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.