Microsoft Patches Active Directory Domain Services Elevation of Privilege Flaw

Microsoft disclosed and patched CVE-2026-25177, an Active Directory Domain Services (AD DS) Elevation of Privilege vulnerability, through its Security Update Guide. The issue affects a core identity service used across Windows enterprise environments, where successful exploitation could allow an attacker to gain higher privileges within an AD-managed domain and increase control over affected systems or directory operations.

The new advisory follows earlier Microsoft fixes for similar AD DS privilege-escalation bugs, including CVE-2022-34691 and CVE-2021-42287, underscoring the continued security risk around domain controller and directory service weaknesses. Organizations running AD DS should prioritize Microsoft’s security updates, assess exposure across domain controllers, and review privileged account activity for signs of attempted abuse tied to elevation-of-privilege paths in Active Directory.