PT-2025-15587 · Microsoft · Active Directory Domain Services+1

Matthieu Buffet · Published 2025-04-08 · Updated 2025-04-11 · CVE-2025-29810

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services versions prior to the fixed version

Description: The issue is related to improper access control in Active Directory Domain Services, allowing an authorized attacker to elevate privileges over a network. This could potentially give attackers complete control over affected systems.

Recommendations: For all versions of Active Directory Domain Services prior to the fixed version, apply the security updates for Windows 10 for 32-bit Systems and Windows 10 for x64-based Systems. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-04247

CVE-2025-29810

Affected Products

Active Directory Domain Services

Windows

References · 16

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29810 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29810 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-29810 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04247 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-29810 · Security Note
• https://osv.dev/vulnerability/CVE-2025-29810 · Vendor Advisory
• https://twitter.com/HoplonInfosec/status/1910769824139182140 · Twitter Post
• https://twitter.com/CVEnew/status/1909665135855087743 · Twitter Post
• https://twitter.com/windowsforum/status/1909996175354188036 · Twitter Post
• https://reddit.com/r/activedirectory/comments/1jw6td7/new_ad_vuln · Reddit Post
• https://twitter.com/lucasverdan/status/1910481925531422950 · Twitter Post
• https://t.me/cvetracker/21155 · Telegram Post
• https://t.me/msrcreports/1965 · Telegram Post
• https://twitter.com/vuldb/status/1910031599728746721 · Twitter Post
• https://t.me/ckure/15438 · Telegram Post