Improper input validation in Windows LDAP allows an authorized attacker to tamper with LDAP entries over the network. This modification of directory data. The weakness corresponds to insecure input processing (CWE-20).

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 22H3, 23H2, 24H2, 25H2; Windows Server 2016, 2016 Server Core, 2019, 2019 Server Core, 2022, 2022 Server Core, 2022 23H2 Edition Server Core, 2025, 2025 Server Core. All 32‑bit, 64‑bit, and ARM variants are listed in the CNA affected products. No specific sub‑release version constraints are publicly documented beyond the editions noted.

The CVSS score of 6.5 indicates a moderate severity. EPSS indicates a very small exploitation probability (1%). The vulnerability is not in the KEV catalog, suggesting limited known exploitation activity. An attack requires an authenticated user with sufficient privileges and network access to the LDAP service; the attacker requests that bypass validation checks to modify directory entries.