A buffer overflow via a stack‑based flaw in Active Directory Domain Services allows an attacker with sufficient privilege on the network to run arbitrary code on the domain controller. The vulnerability is exploitable only by accounts that already have legitimate administrative authority, which means that it can be used by a compromised or legitimately authorized user to gain further control or pivot to other resources. The potential damage is systemic, giving the attacker the same privileges as the exploited account and compromising confidentiality, integrity, and availability for the entire domain.

Microsoft Windows Server 2022, Windows Server 2025, and Windows Server 2025 Server Core installations are affected. Any AD DS instance running under these operating systems is vulnerable, regardless of the specific domain configuration or role set.

The CVSS score of 8.8 highlights high severity; however, EPSS data is not provided, so the exact likelihood of exploitation cannot be quantified. The vulnerability is not listed in CISA’s KEV catalog, but the fact that an authorized attacker can trigger the flaw increases the real‑world risk for environments lacking strict privilege segregation and external network segmentation.